Skip to content

$ cat post-mortem-patching-the-php-and-nodejs-vulnerabilities.md

Post Mortem: Patching the PHP and Node.js Vulnerabilities

This post mortem explains how the team patched every Laravel Cloud app in place within about 27 hours of the PHP and Node.js vulnerability disclosures. It also covers what broke on Forge, Envoyer, and Vapor during the rollout and the process changes the team plans to make.

blog.laravel.com04 Nov 2026 · 1 min read · summary
Read on laravel.com ↗
How we patched every Laravel Cloud app in place within about 27 hours of the PHP and Node.js disclosures, what broke on Forge, Envoyer, and Vapor, and what we are changing.

source

This is a summary of an article first published by blog.laravel.com. The full piece is on their site.

Open original