PHP Vulnerability Responses by Company

Electronic Service Initiative

Japan-based services
Aliases / services
ESI / Electronic Service Initiative / エレクトロニック・サービス・イニシアチブ / PHPセキュリティ延長保守サービス
Official website
https://www.es-i.jp/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

PHP Security Patch Service

Response status
Fixes released for both CVEs
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Security patches for end-of-life PHP.

October23 release announces PHP2Shell fixes for the extended support service, covering PHP5.3–8.1.

Scope: Release availability does not confirm deployment on customer systems.

What users should do

Consult subscriber repository release notes and deploy the appropriate update.

Official service URL

Source URLs

  1. https://www.es-i.jp/news/20261023-0601/229https://www.es-i.jp/news/20261023-0601/229Response evidence
  2. Expanded PHP extended security maintenancehttps://www.es-i.jp/news/20261020-1100/227Service and operation documentation
Related official sources
  1. Expanded PHP extended security maintenanceOfficial information directory

Comments