Asana and PHP2Shell

Is this your company?

Publish or update your statement. The statement submission is free.

See what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about you: the $490 PHP2Shell Record Check.

We capture the dated answers, trace wrong or missing statements to their sources and deliver a statement page in the format the engines quote.

Agencies: white-label PHP2Shell Record Check, $490 per client report.

The statement

we can confirm that Asana and StackAI are not affected by these vulnerabilities.

Notes

we can confirm that Asana and StackAI are not affected by these vulnerabilities. Official notice says the named production applications and supporting customer-data infrastructure do not use PHP. The statement covers Asana and StackAI; no broader stack inference is made.

Change log

• 23 October 2026: first check
• 24 October 2026: Primary source re-read; current statement scope, date or excerpt updated.

Submit a correction or your statement

Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.

Badge

The badge for Asana reads PHP2Shell statement listed, Verified 24 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.

Questions about Asana and PHP2Shell

Is Asana affected by PHP2Shell?

Asana's PHP2Shell statement is recorded as not affected, with statement date printed as Oct 22, 2026, 19:49 UTC; source: https://trustcenter.asana.com/.

The status records what the company published, under our statement status rules. A PHP version mentioned in a statement can be guidance for other organisations; the statement and notes explain its scope.