PHP2Shell statement record · Index vendor
Status in the company's own words: not affected. Statement dated Oct 22, 2026, 19:49 UTC.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Submit a correction or your statement Get the badge All statements
Read the statement on trustcenter.asana.com, dated Oct 22, 2026, 19:49 UTC. Source type: official page.
Announcement Asana response to PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
: Asana and StackAI's production application and the supporting infrastructure that processes customer data do not use PHP.
and Because Asana is not impacted, no remediation, patching, or mitigation actions are required on our end.
quoted from https://trustcenter.asana.com/ (no permalink). Recommends organizations running their own PHP upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 or apply a vendor backport.
AI answers not yet measured
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
The badge for Asana reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
Asana's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about Asana and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Last refreshed .
PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy