Update on PHP security disclosures

Planet moved quickly following the disclosure of critical PHP vulnerabilities on 21 October and has now completed its review and mitigation across relevant systems. 

We can confirm, Planet does not use PHP in our payments systems.  

In non-payment environments where PHP was in use, we applied immediate patches and mitigations to reduce risk for public and customer-facing systems.   

We have found no exploitation of or disruption to Planet systems related to the PHP vulnerabilities disclosed. We continue to monitor developments from across the security community and maintain appropriate security controls as part of our ongoing security programme.  

Our current patching and mitigation work has not required any of our customers or partners to make changes, and we will make contact directly if we identify any action needed in connection with Planet services.