PHP Vulnerability Responses by Company

Dropbox, Inc.

Global cloud / infrastructure
Aliases / services
Dropbox / Dropbox Sign / Dropbox / Dropbox Sign / HelloSign / Dropbox, Inc.
Official website
https://www.dropbox.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Dropbox Sign (formerly HelloSign)

Response status
PHP security update completed
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The 21 October emergency maintenance installed the latest secure PHP release and restored service.

Scope: The notice names neither CVE nor exact PHP version. It does not cover all Dropbox products or customer-run PHP.

What users should do

Check signing requests and integrations affected by maintenance; contact support for persistent issues.

Source URLs

  1. https://status.hellosign.com/https://status.hellosign.com/Service and operation documentation
  2. https://status.hellosign.com/incidents/r2d5pw74grzlhttps://status.hellosign.com/incidents/r2d5pw74grzlResponse evidence
Related official sources
  1. Dropbox / Dropbox Sign: official PHP integration documentationOfficial information directory
  2. Dropbox / Dropbox Sign: official operator and legal/company informationOfficial information directory

Comments