GoCardless Ltd
- Aliases / services
- GoCardless / GoCardless Ltd
- Official website
- https://gocardless.com/
Sources identifying the operating company
Developer platform and website provider; distinct from the French entity GoCardless SAS.
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
GoCardless PHP API
- Response status
- Official advisory; latest PHP patch recommended
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Install gocardless/gocardless-pro and initialize with GC_ACCESS_TOKEN and SANDBOX/LIVE. Its README cites both incident CVEs and recommends the latest supported PHP patch.
Scope: The official README names CVE-2026-109618/109619 and advises users to update PHP. Impact and remediation of the GoCardless platform remain unconfirmed.
What users should do
Upgrade to the latest patch of a supported PHP version, then test the client with the correct GC_ACCESS_TOKEN and SANDBOX/LIVE environment.
Official service URL
Source URLs
- Official README recommending PHP patches for both CVEshttps://github.com/gocardless/gocardless-pro-phpResponse evidence
- Official operating entity informationhttps://gocardless.com/de-de/rechtlichesService and operation documentation
Related official sources
- Official README recommending PHP patches for both CVEsOfficial notice
- Official operating entity informationOfficial information directory
Comments