PHP Vulnerability Responses by Company

Asana, Inc.

Global cloud / infrastructure
Aliases / services
Asana / Asana Inc. / StackAI / Eigen Inc. / asana.com / Asana, Inc.
Official website
https://asana.com/
Sources identifying the operating company

Current Asana product terms include StackAI. Legacy StackAI provider Eigen Inc. is not treated as the same legal entity. Check your order and applicable terms for the contract party.

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Asana production services and customer-data infrastructure

Response status
No PHP; not affected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Work management and AI workflow services.

The 22 October notice says its production applications and supporting customer-data infrastructure do not use PHP.

Scope: This finding covers Asana production, not customer-built integrations.

What users should do

No Asana action is required; assess PHP systems you operate separately.

Official service URL

Source URLs

  1. Asana and StackAI PHP2Shell responsehttps://trustcenter.asana.com/?source=G2Response evidence
  2. Company and provider informationhttps://investors.asana.com/node/12006/pdfService and operation documentation

StackAI by Asana production service

Response status
No PHP; not affected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Asana's 22 October notice also excludes StackAI production applications and customer-data infrastructure because they do not use PHP.

Scope: Do not extend the production finding to all customer-operated on-premises or BYOC environments. Check the contracting entity in your agreement.

What users should do

No action for this production service; assess customer-built applications separately.

Source URLs

  1. Asana and StackAI PHP2Shell responsehttps://trustcenter.asana.com/?source=G2Response evidence
  2. Company and provider informationhttps://investors.asana.com/node/12006/pdfService and operation documentation
Related official sources
  1. Asana and StackAI PHP2Shell responseOfficial notice
  2. Company and provider informationOfficial information directory

Comments