PHP Vulnerability Responses by Company

Xendit

海外決済・API
Aliases / services
PT Sinar Digital Terdepan / Xendit Philippines Inc / Dragonpay / Xendit
Official website
https://www.xendit.co/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Xendit REST API PHP SDK

Response status
Not listed
Response information checked
2026-10-28

Current re-audit: Official sources searched; no response found · Research date: 2026-10-28

The official PHP SDK requires PHP 7.4 or later and documents Composer installation and secret API-key setup for invoice/refund APIs.

Scope: Official merchant-side PHP integration documentation was reviewed. Cloud-side PHP use and PHP2Shell or either CVE fixes remain unconfirmed.

What users should do

Check compatibility, install the SDK and configure the dashboard secret on the server. The version floor does not prove patch deployment.

Official service URL

Source URLs

  1. Official Xendit PHP SDKhttps://github.com/xendit/xendit-phpService and operation documentation
Related official sources
  1. Official Xendit PHP SDKOfficial information directory
  2. Xendit LicensesOfficial information directory

Comments