Coding Agency

Brewless

Response status

Redeployed with fixed images

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Images using PHP8.3.36,8.4.27 and8.5.12 were rebuilt, and all apps redeployed and checked on October21.

Scope: This covers Coding Agency's Brewless management, not all Scaleway services.

What users should do

Check application operation and report problems.

Official service URL

• https://coding.agency/

Source URLs

1. Coding Agency: PHP vulnerability responsehttps://coding.agency/kennisbank/php2shell-cve-2026-109618-109619Response evidence

Laravel Vapor environments managed by Coding Agency

Response status

Managed environments redeployed; legacy versions need migration

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The provider reports redeploying and checking managed Vapor environments by08:00 on October22; PHP8.1 and older lack the hotfix and need migration.

Scope: Limited to Coding Agency-managed environments, not all Vapor or AWS services.

What users should do

Check management coverage and PHP version; redeploy or migrate environments outside that coverage.

Source URLs

1. Coding Agency: PHP vulnerability responsehttps://coding.agency/kennisbank/php2shell-cve-2026-109618-109619Response evidence

Forge servers managed by Coding Agency

Response status

Managed servers patched

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The provider reports individually patching its managed Forge servers on DigitalOcean and Hetzner after package release.

Scope: This does not establish remediation for every DigitalOcean, Hetzner or Forge customer.

What users should do

Check your management contract and separately address unmanaged servers.

Source URLs

1. Coding Agency: PHP vulnerability responsehttps://coding.agency/kennisbank/php2shell-cve-2026-109618-109619Response evidence