Ory’s Response to the eMudhra and PHP Vulnerabilities
Blog post from Ory
Ory’s October 22, 2026 security update reports that issues involving an eMudhra certificate compromise, Go vulnerability CVE-2026-111943/GO-2026-6809, and the October 21 Node.js security release have been resolved across Ory Network, with Ory Enterprise License fixes available in versions 26.4.6 for eMudhra and Go and 26.4.7 for Node.js. Ory states that it is not affected by the listed PHP vulnerabilities because it does not use PHP in systems that process or store customer data, although it is reviewing potential exposure among relevant sub-processors. The company reports no indicators of compromise and says it will directly notify affected customers if that changes, while directing questions to account teams or its security contact.
No tracked trend matches for this post yet.
Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.