PHP Vulnerability Responses by Company

Clever Cloud

Global cloud / infrastructure
Aliases / services
クレバークラウド / Clever.Cloud / Clever Cloud
Official website
https://www.clever.cloud/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Clever Cloud PHP runtime (7.4 / 8.0 / 8.1 / 8.2–8.5)

Response status
Fixed releases available; automatic redeployment ongoing
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides platforms for PHP, FrankenPHP, containers, and other workloads.

Announces fixed PHP 8.2–8.5 releases and backports for 7.4/8.0/8.1, with automatic redeployment in progress. No action is required from covered customers.

Scope: Maintenance still displays In Progress, with another image deployed October 23. Do not infer every app completed redeployment. FrankenPHP and managed Matomo are separate scopes.

What users should do

Check the redeployment status of the relevant applications. Because maintenance issues beyond this incident remain in 7.4/8.0/8.1, consider moving to a supported branch.

Official service URL

Source URLs

  1. PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 are availablehttps://www.clever.cloud/developers/changelog/2026/10-21-php-security-vulnerabilities/Response evidence
  2. PHP 7.4.33, 8.0.30 and 8.1.34 patchedhttps://www.clever.cloud/developers/changelog/2026/10-21-php-eol-security-backport/Response evidence
  3. https://www.clevercloudstatus.com/schedules/3a899921-b728-4f63-943a-223fb4e361a5https://www.clevercloudstatus.com/schedules/3a899921-b728-4f63-943a-223fb4e361a5Service and operation documentation

Clever Cloud FrankenPHP

Response status
Fixed1.13.1 available
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Only1.13 is supported; available1.13.1 includes fixes.

Scope: Applies regardless of CC_PHP_VERSION.

What users should do

Verify the deployed runtime and update old branches.

Source URLs

  1. PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 are availablehttps://www.clever.cloud/developers/changelog/2026/10-21-php-security-vulnerabilities/Response evidence

Clever Cloud managed Matomo add-ons

Response status
Migrated to PHP8.3
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Managed Matomo previously using8.1/8.2 was moved to8.3.

Scope: The paragraph does not specify per-instance patch revisions or final rollout completion time.

What users should do

Check the add-on and contact support for deployment issues.

Source URLs

  1. PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 are availablehttps://www.clever.cloud/developers/changelog/2026/10-21-php-security-vulnerabilities/Response evidence
Related official sources
  1. PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 are availableOfficial notice
  2. PHP 7.4.33, 8.0.30 and 8.1.34 patchedOfficial notice

Comments