Spryker

Global cloud / infrastructure

Aliases / services: スプライカー / Spryker Commerce OS / Spryker
Official website: https://spryker.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Spryker Commerce OS / spryker-php images

Response status: Fixed images available; redeployment required
Response information checked: 2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provider of a PHP commerce platform.

The October 21 image release provides PHP fixes for both CVEs. Customer environments require the documented image-regeneration and redeployment procedure.

Scope: A regular deployment alone reuses a cached image. Availability of fixed images is not evidence of deployment in each customer's environment.

What users should do

Follow the documented update branch, empty commit, PR and required checks, then deploy each environment and verify running PHP and health.

Official service URL

https://spryker.com/

Source URLs

https://docs.spryker.com/docs/about/all/releases/image-releases/spryker-php/release-notes-spryker-php-20261021https://docs.spryker.com/docs/about/all/releases/image-releases/spryker-php/release-notes-spryker-php-20261021Response evidence
Spryker system requirementshttps://docs.spryker.com/docs/dg/dev/system-requirements/latest/system-requirements.htmlService and operation documentation
https://docs.spryker.com/docs/about/all/releases/security-releases/security-release-notes-202610.0https://docs.spryker.com/docs/about/all/releases/security-releases/security-release-notes-202610.0Service and operation documentation

Related official sources

Spryker system requirementsOfficial information directory