nolaction合同会社
- Aliases / services
- nolaction合同会社 / CoLabField / コラフィー / CoLabLink / nolaction (CoLabField)
- Official website
- https://colabfield.org/
Sources identifying the operating company
CoLabField was transferred from the unincorporated CoLabLink group on October 1, 2026. The former operator and current company are distinct.
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
CoLabField project pages
- Response status
- Patched PHP confirmed; files and logs checked
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
nolaction LLC took over operation of CoLabField on October 1.
The provider patched on October 22 morning; CoLabField confirmed the patched runtime and reported no intrusion traces in its October 23 file and access-log checks.
Scope: Separate from the new My Page launched April 17; old bookmarks are not transferred.
What users should do
No additional user action is requested for this vulnerability.
Official service URL
Source URLs
- PHP vulnerability responsehttps://colabfield.org/post-20261023/Response evidence
CoLabField announcements
- Response status
- Patched PHP confirmed; files and logs checked
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The provider patched on October 22 morning; CoLabField confirmed the patched runtime and reported no intrusion traces in its October 23 file and access-log checks.
Scope: Separate from the new My Page launched April 17; old bookmarks are not transferred.
What users should do
No additional user action is requested for this vulnerability.
Source URLs
- PHP vulnerability responsehttps://colabfield.org/post-20261023/Response evidence
Old My Page (registered by April 16)
- Response status
- Patched PHP confirmed; files and logs checked
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The provider patched on October 22 morning; CoLabField confirmed the patched runtime and reported no intrusion traces in its October 23 file and access-log checks.
Scope: Separate from the new My Page launched April 17; old bookmarks are not transferred.
What users should do
No extra vulnerability action is requested. Separately, re-register for the new My Page before the old system closes on December 24.
Source URLs
- PHP vulnerability responsehttps://colabfield.org/post-20261023/Response evidence
New My Page (registered from April 17)
- Response status
- Outside this incident’s scope
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The notice says the new My Page launched April 17 runs on a separate system and is not affected by this incident.
Scope: Separate-system wording is not used to infer an unstated technology stack.
What users should do
Continue normal use; old-system users should follow official re-registration guidance.
Source URLs
- PHP vulnerability responsehttps://colabfield.org/post-20261023/Response evidence
Related official sources
- PHP vulnerability responseOfficial notice
- Organization and operator informationOfficial information directory
Comments