Following the recently disclosed critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619). I understand that Anvil applications are built using Python rather than PHP. I was wondering if anyone knows whether Anvil’s hosting infrastructure could be affected?
I don’t think so. Anvil’s infrastructure is mostly built using Clojure.
And the open source engine reveals zero involvement of PHP anywhere.
4 Likes
Yep, I can confirm we’re not affected.
2 Likes
Good to hear. Thanks for your confirmation!