PHP Vulnerability Responses by Company

trycourier.com, Inc.

Global cloud / infrastructure
Aliases / services
Courier / trycourier.com, Inc. / TryCourier / Courier PHP SDK
Official website
https://www.courier.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Production unaffected; check SDK runtime
Response information checked
2026-10-27 Rechecked: 2026-10-27

Notification APIs and SDKs provided by trycourier.com, Inc.

On October 21, Courier reported that its production systems do not use PHP. Its PHP SDK needs no code change, but customers must update the PHP runtime that executes it.

What users should do

If you use the PHP SDK, update your own server's PHP runtime to a fixed release. No Courier SDK update is required.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://www.courier.com/blog/emudhra-ca-compromise-php-security-releaseResponse evidence
  2. Operating entityhttps://www.courier.com/privacy-policyService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments