Pantheon

Global hosting

Aliases / services: Pantheon / pantheon.io
Official website: https://pantheon.io/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Live / Pre-production / LTS / Free Sandbox

Response status: Partially patched; work continues
Response information checked: 2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Customer environments including LTS are patched and the incident was resolved October 22. The preceding notice scheduled Free/Sandbox updates within 24–48 hours without separate completion confirmation.

What users should do

No patch action for paid environments. Confirm Free/Sandbox patching using the environment name; check scope for custom PHP images.

Official service URL

https://pantheon.io/

Source URLs

Pantheon: PHP vulnerability responsehttps://status.pantheon.io/incidents/x7h8z1yhgvmlResponse evidence

Related official sources

Pantheon: PHP vulnerability responseOfficial noticeOfficial incident notice reviewed.