PHP Vulnerability Responses by Company

GoCardless

Global cloud / infrastructure
Aliases / services
GoCardless / GoCardless Ltd
Official website
https://gocardless.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

GoCardless PHP API

Response status
Official advisory; latest PHP patch recommended
Response information checked
2026-10-27 Rechecked: 2026-10-27

Install gocardless/gocardless-pro and initialize with GC_ACCESS_TOKEN and SANDBOX/LIVE. Its README cites both incident CVEs and recommends the latest supported PHP patch.

Scope: The official README names CVE-2026-109618/109619 and advises users to update PHP. Impact and remediation of the GoCardless platform remain unconfirmed.

What users should do

Upgrade to the latest patch of a supported PHP version, then test the client with the correct GC_ACCESS_TOKEN and SANDBOX/LIVE environment.

Official service URL

Source URLs

  1. Official README recommending PHP patches for both CVEshttps://github.com/gocardless/gocardless-pro-phpResponse evidence
  2. Official operating entity informationhttps://gocardless.com/de-de/rechtlichesService and operation documentation
Related official sources
  1. Official README recommending PHP patches for both CVEsOfficial notice
  2. Official operating entity informationOfficial information directory

Comments