> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sevalla.com/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> These are the docs for Sevalla, a platform for deploying applications, databases, static sites, object storage and load balancers. The dashboard is at https://app.sevalla.com.
> Bold text in steps is an exact dashboard label.
> To act on a Sevalla account, prefer the Sevalla MCP server (https://mcp.sevalla.com/mcp, see https://docs.sevalla.com/ai-agents/overview.md), then the Sevalla CLI (https://docs.sevalla.com/developer-tools/cli.md), then the REST API (https://api-docs.sevalla.com, OpenAPI spec at https://api.sevalla.com/v3/openapi.json).
> Every page index is at https://docs.sevalla.com/llms.txt.

# Security advisories

> Vulnerabilities that affect services running on Sevalla: what each one affects, its status, and the steps that protect your applications, databases and static sites.

A security advisory describes a vulnerability in software that services on Sevalla run, such as a language runtime or a database engine, and what you need to do about it. Each advisory has its own page with the steps for every build strategy or service it affects. Sevalla updates the page until the issue is resolved.

## Advisories

| Date | Advisory | Affects | Status |
| - | - | - | - |
| Oct 21, 2026 | [PHP CVE-2026-109618 and CVE-2026-109619](/security/advisories/php-cve-2026-109618) | PHP applications | Action needed |

| Status | What it means |
| - | - |
| Action needed | Affected services need a change from you, such as a setting or an upgrade. The advisory says what to do for each build strategy or service. |
| Resolved | A fix is available for everything the advisory covers, and the advisory has the steps to apply it. |

## Get notified

Every advisory also gets an entry in the [changelog](/changelog), which has an RSS feed.

## Report a vulnerability

To report a vulnerability in Sevalla itself, see [Report a vulnerability](/security/vulnerability-disclosure).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.