PHP Vulnerability Responses by Company

Temporal

Global cloud / infrastructure
Aliases / services
Temporal / Temporal Technologies / Temporal Cloud / Temporal Server / Temporal PHP SDK / temporal.io
Official website
https://temporal.io/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Temporal Server

Response status
Reported unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Workflow execution infrastructure.

The October 22 notice says Temporal Server is unaffected by these PHP vulnerabilities.

Scope: Separate from other Temporal CVE remediation.

What users should do

Assess accompanying PHP applications separately.

Official service URL

Source URLs

  1. Temporal PHP2Shell noticehttps://trust.temporal.io/subprocessorsResponse evidence

Temporal Cloud

Response status
Reported unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 22 notice reports no impact.

Scope: Cloud service, distinct from Server.

What users should do

Check accompanying PHP separately.

Source URLs

  1. Temporal PHP2Shell noticehttps://trust.temporal.io/subprocessorsResponse evidence

Temporal PHP SDK

Response status
No direct impact reported
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The SDK does not serve web requests, so it is not directly affected.

Scope: SDK scope only.

What users should do

Assess PHP serving web requests separately.

Source URLs

  1. Temporal PHP2Shell noticehttps://trust.temporal.io/subprocessorsResponse evidence
Related official sources
  1. Temporal PHP2Shell noticeOfficial notice

Comments