PHP Vulnerability Responses by Company

Popout, Inc.

Global cloud / infrastructure
Aliases / services
Shippo / GoShippo / Popout, Inc.
Official website
https://goshippo.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Shippo legacy PHP SDK

Response status
SDK code unaffected; update your PHP
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Shippo says the SDK code itself is unaffected. The legacy library is no longer actively maintained.

Scope: SDK code and the PHP runtime are separate. See the hosted-platform scope for Shippo infrastructure.

What users should do

Update the PHP runtime that executes the SDK to a fixed release or vendor-patched package.

Official service URL

Source URLs

  1. https://trust.goshippo.com/https://trust.goshippo.com/Response evidence
  2. Shippo: official PHP integration documentationhttps://github.com/goshippo/shippo-php-clientService and operation documentation
  3. https://privacy.goshippo.com/policies?name=terms-of-usehttps://privacy.goshippo.com/policies?name=terms-of-useService and operation documentation

Shippo platform, API and web applications

Response status
Reported unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Shippo reports that its production environment contains no PHP runtime.

Scope: Customer PHP applications that connect to Shippo are outside this assessment.

What users should do

No remediation is required for Shippo infrastructure for this issue.

Source URLs

  1. https://trust.goshippo.com/https://trust.goshippo.com/Response evidence
  2. Shippo: official PHP integration documentationhttps://github.com/goshippo/shippo-php-clientService and operation documentation
  3. https://privacy.goshippo.com/policies?name=terms-of-usehttps://privacy.goshippo.com/policies?name=terms-of-useService and operation documentation

Shippo public websites and documentation

Response status
Reported unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Shippo reports no identified PHP exposure on the third-party platforms hosting its public sites and documentation.

Scope: Limited to Shippo public websites and documentation.

What users should do

No additional user action is specified for these sites.

Source URLs

  1. https://trust.goshippo.com/https://trust.goshippo.com/Response evidence
  2. Shippo: official PHP integration documentationhttps://github.com/goshippo/shippo-php-clientService and operation documentation
  3. https://privacy.goshippo.com/policies?name=terms-of-usehttps://privacy.goshippo.com/policies?name=terms-of-useService and operation documentation

Shippo WooCommerce integration

Response status
Integration code unaffected; update your PHP
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Shippo says its integration code is unaffected but customers must update their own PHP runtime.

Scope: Covers the Shippo WooCommerce integration, not an assessment of the entire WooCommerce product.

What users should do

Apply a fixed PHP release or operating-system security package where the integration runs.

Source URLs

  1. https://trust.goshippo.com/https://trust.goshippo.com/Response evidence
  2. Shippo: official PHP integration documentationhttps://github.com/goshippo/shippo-php-clientService and operation documentation
  3. https://privacy.goshippo.com/policies?name=terms-of-usehttps://privacy.goshippo.com/policies?name=terms-of-useService and operation documentation

Shippo Magento integration

Response status
Integration code unaffected; update your PHP
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Shippo says its integration code is unaffected but customers must update their own PHP runtime.

Scope: Covers the Shippo Magento integration, not an assessment of the entire Magento product.

What users should do

Apply a fixed PHP release or operating-system security package where the integration runs.

Source URLs

  1. https://trust.goshippo.com/https://trust.goshippo.com/Response evidence
  2. Shippo: official PHP integration documentationhttps://github.com/goshippo/shippo-php-clientService and operation documentation
  3. https://privacy.goshippo.com/policies?name=terms-of-usehttps://privacy.goshippo.com/policies?name=terms-of-useService and operation documentation

Shippo PrestaShop integration

Response status
Integration code unaffected; update your PHP
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Shippo says its integration code is unaffected but customers must update their own PHP runtime.

Scope: Covers the Shippo PrestaShop integration, not an assessment of the entire PrestaShop product.

What users should do

Apply a fixed PHP release or operating-system security package where the integration runs.

Source URLs

  1. https://trust.goshippo.com/https://trust.goshippo.com/Response evidence
  2. Shippo: official PHP integration documentationhttps://github.com/goshippo/shippo-php-clientService and operation documentation
  3. https://privacy.goshippo.com/policies?name=terms-of-usehttps://privacy.goshippo.com/policies?name=terms-of-useService and operation documentation
Related official sources
  1. Shippo: official PHP integration documentationOfficial information directory
  2. Shippo: official operator and legal/company informationOfficial information directory

Comments