Appwrite: "We are aware of PHP2Shell, the two critical PHP vulnerabilities that PH..." | nitter

Oct 21

We are aware of PHP2Shell, the two critical PHP vulnerabilities that PHP is patching today at 14:00 UTC.

We have found no evidence that Appwrite is affected so far. We are still checking and will let you know right away if that changes. 🧵

Oct 21, 2026 · 9:13 AM UTC

1

3

34

7,870

Oct 21

Replying to @appwrite

Why we don't expect to be affected: Appwrite doesn't run on PHP-FPM. The API, Realtime and workers run on Swoole.

1

0

5

1,216

Oct 21

Replying to @appwrite

Appwrite PHP functions aren't affected either. Every PHP runtime runs your code inside a Swoole server built on the PHP CLI image.

PHP-FPM isn't installed in those images, and nothing you write in a function changes how requests reach it.

1

0

2

1,107

Oct 21

Replying to @appwrite

A self-hosted release will be on the way as a precaution once official PHP fix is live.

1

0

1

468

RepliesRelevant