PHP2Shell statement record · Platform

BookStack and PHP2Shell

BookStack's PHP2Shell statement is recorded as customer must update, with statement date printed as Posted 21st October 2026; Post last updated 23rd October at 23:03 UTC; read the published statement.

This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.

Last checked . Last refreshed .

Submit a correction or your statement Get the badge All statements

Is this your company?

Publish or update your statement. The statement submission is free.

See what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about you: the $490 PHP2Shell Record Check.

We capture the dated answers, trace wrong or missing statements to their sources and deliver a statement page in the format the engines quote.

Agencies: white-label PHP2Shell Record Check, $490 per client report.

The record

Company
BookStack
Domain
bookstackapp.com
Group
Platform
Index category
not an Index vendor
Status
customer must update
Statement found
yes
Statement
https://www.bookstackapp.com/blog/php-security-release-critical/
Statement date
Posted 21st October 2026; Post last updated 23rd October at 23:03 UTC
Fixed version named
yes: PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35
Worker restart stated
yes
End of life plan stated
no
Source type
official blog
Places checked
Last checked

The statement

Fixes are included as part of the following versions of PHP:

Read the statement on www.bookstackapp.com, dated Posted 21st October 2026; Post last updated 23rd October at 23:03 UTC. Source type: official blog.

Notes

Fixes are included as part of the following versions of PHP: The official project post now prints last updated 23rd October at 23:03 UTC. Customers must apply PHP updates or updated deployment images; available fixes do not establish installation on a customer system.

Change log

What the five engines said

AI answers not yet measured

Submit a correction or your statement

Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.

Badge

The badge for BookStack reads PHP2Shell statement listed, Verified 24 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.

Questions about BookStack and PHP2Shell

Is BookStack affected by PHP2Shell?

BookStack's PHP2Shell statement is recorded as customer must update, with statement date printed as Posted 21st October 2026; Post last updated 23rd October at 23:03 UTC; source: https://www.bookstackapp.com/blog/php-security-release-critical/.

The status records what the company published, under our statement status rules. A PHP version mentioned in a statement can be guidance for other organisations; the statement and notes explain its scope.

About this page

This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.

Last refreshed .

PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy