Due to a critical PHP security advisory published today, 21 October 2026, doo has proactively implemented protective measures. The German Federal Office for Information Security (BSI), amongst others, has warned that all known PHP versions may be affected by severe security vulnerabilities and recommends the immediate installation of the security updates provided by the PHP development team.
To minimize risk until the security updates have been fully deployed, we have temporarily restricted certain upload functions within the platform. This currently affects, among other things, contact imports and various document and file upload features.
These measures are intended to protect your data and the overall platform infrastructure. The security and availability of our platform remain our highest priorities.
As soon as the security updates provided by the PHP developers are available and have been thoroughly tested by our team, we will deploy the updated PHP versions and restore the affected functionality.
Update 22 October 2026, 08:52 am
The new PHP versions with the security fixes where deployed yesterday evening around 07:08 pm. We are monitoring the development. Restrictions in functionality may still occur.
Further information about the BSI security advisory:
BSI Security Advisory on Critical PHP Vulnerabilities (German)
