PHP Vulnerability Responses by Company

Beyond Code

Global cloud / infrastructure
Aliases / services
Beyond Code / Beyond Code GmbH / Laravel Herd / Herd / Tinkerwell / Expose / php.new
Official website
https://beyondco.de/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Own systems fixed; Herd PHP updates available
Response information checked
2026-10-27 Rechecked: 2026-10-27

German Beyond Code GmbH develops Herd, Tinkerwell and Expose.

Its Laravel systems, including licensing, product sites, courses and internal applications, were patched. Fixed PHP builds are available through Herd and php.new. Herd is licensed by Beyond Code GmbH.

What users should do

Update Herd and also update the PHP versions used within the app. Verify the PHP build actually running on your machine.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://beyondco.de/blog/php-security-releaseResponse evidence
  2. Operating entityhttps://beyondco.de/legalService and operation documentation
  3. Official service and authorhttps://herd.laravel.com/eulaService and operation documentation
  4. Official service and authorhttps://herd.laravel.com/Service and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory
  3. Official service and authorOfficial information directory
  4. Official service and authorOfficial information directory

Comments