Appwrite: "Appwrite Cloud now rejects the compromised eMudhra certificate chains, ..." | nitter

Oct 22

An update on PHP2Shell and the eMudhra certificate compromise.

We've confirmed that Appwrite is not affected by PHP2Shell. Appwrite Cloud is also patched for eMudhra in every region.

Here's what we've checked and what self-hosted users should do. 🧵

2

1

13

2,183

Oct 22

Replying to @appwrite

Appwrite serves requests through Swoole, so the two PHP2Shell vulnerabilities don't affect it. We've upgraded to PHP 8.5.12 as a precaution.

Our write-up also covers what to check in custom PHP functions:
appwrite.io/blog/post/php2…

1

0

6

345

Oct 22

Replying to @appwrite

Appwrite Cloud now rejects the compromised eMudhra certificate chains, with TLS verification still enabled.

Self-hosted users should upgrade 2.x to 2.6.1 or 1.9 to 1.9.9. Both include the patch: appwrite.io/blog/post/emud…

Oct 22, 2026 · 12:46 PM UTC

0

0

3

232

RepliesRelevant