PHP2Shell: AI uncovers critical RCE vulnerabilities This is just a quick question from support - Are your GoodData cloud anywhere affected by "PHP2Shell: critical RCE vulnerabilities"? As we are embedding gooddata dashboard in our site, it is critical for us to know.

Thinking completed I'm sorry, but the knowledge sources don't contain any information about "PHP2Shell" or whether GoodData Cloud is affected by it. I can't confirm or rule out any impact, and I don't want to guess given how critical this is for your embedded setup. What the documentation does cover is general security guidance for deployments. It recommends regularly updating GoodData SDKs and frameworks, and monitoring GoodData release notes and service notifications for security alerts. [Secure deployment] For embedded setups, it also recommends configuring CORS and Content Security Policies according to your embedding model. [Secure deployment] An official statement about this specific vulnerability needs a GoodData Support team member. To help them investigate, please add the following details to this thread: • The exact vulnerability identifier (e.g., CVE ID) or advisory link • The GoodData SDK packages and versions you embed with • Your embedding approach (e.g., GoodData.UI, web components, iframe) • Any component or behavior that makes you suspect exposure Community support (Startup & Professional) You're already in the right place: the GoodData Support team monitors this Slack, and a team member will join the conversation when human review is needed. Please keep the discussion here and post the requested details in this thread. The Community Forums are an additional option. 24/7 Support (Enterprise plans) In addition to this thread, these direct options are available if the issue is Severity 1 (L1) critical, such as an active outage, or if your account tier includes 24/7 Support: • Submit a ticket: support.gooddata.com/hc/en-us/requests/new?ticket_form_id=582387 • Email: support@gooddata.com • Call: +1 (415) 200-0194 👍 0 button 👎 0 button ℹ️ Tip: Mention @kapa.ai in the thread for follow-ups. 👀 Our Support team monitors all messages and will jump in if needed.

Hi Krishti, I have already replied to you in the direct ticket you sent into us here: gooddata.zendesk.com/agent/tickets/135007 But I will reiterate here in Slack, that we have already published an official statement regarding the PHP vulnerabilities, which can be found here: support.gooddata.com/hc/en-us/articles/566719004620…

Thanks