Hi there. A lot of SaaS providers have temporarily shut down their systems while they’re patching their PHP systems because of the PHP2Shell vulnerability.
Is this something we need to be concerned about with our Bubble apps?
Anything we need to do to ensure we’re protected?
Regards,
Blair.
Bubble doesn’t run on PHP.
Yes I’m aware of that.
But do any of the services that it relies upon?
It would be great to be able to go out to our customers with confidence and tell them that there won’t be any impact.
The only things I could possibly think of would be an old plugin that uses their private server, but Bubble doesn’t have control over that…
or, maybe an outside API if it ends in php, you could check it and make sure they’ve updated their security patches.
I’m pretty sure all the enterprise APIs are secure.