Overview
GHD is aware of the recently disclosed PHP vulnerabilities and has completed a review with our security and technical teams.
Based on this assessment, the vulnerabilities do not affect the Govstack Platform or its supporting environment.
Why the Govstack Platform Is Not Affected
PHP is a server-side scripting language used by many web applications and content management systems.
The Govstack Platform is built on the Microsoft .NET technology stack and does not rely on the affected PHP components. This includes platform services such as:
- Content Management (CMS)
- Business Directory
- Facilities Management
- Events
- Forms
- Subscription Management
- User and Role Management
- Related platform administration and supporting services
As a result, the reported PHP vulnerabilities are not applicable to the Govstack Platform architecture, and our review found no exposure within the platform or its supporting services.
Security Review Process
As part of GHD's security program, significant vulnerability disclosures are reviewed to determine potential impacts on our products and infrastructure. This review includes:
- Vulnerability management and assessment
- Security monitoring and threat intelligence
- Incident detection and response processes
- Periodic penetration testing
- Remediation activities where exposure is identified
Following this review, no impact to the Govstack Platform was identified.
Customer Action
No action is required.
Customers do not need to install updates, modify configurations, or make changes to their Govstack Platform services in relation to these PHP vulnerabilities.
Frequently Asked Questions
Is the Govstack Platform built on PHP?
No. The Govstack Platform is built using Microsoft .NET technologies and does not depend on PHP. This includes the CMS as well as platform services such as Business Directory, Facilities Management, Events, Forms, Subscription Management, and User and Role Management.
Is customer or website data at risk?
Our assessment identified no exposure to the Govstack Platform or its supporting environment related to these vulnerabilities.
Do I need to install a patch or update?
No. No customer action, patching, or configuration changes are required.
Does this affect website availability or platform services?
No impact has been identified to Govstack websites or any Govstack Platform services as a result of these vulnerabilities.
Will GHD continue to monitor this issue?
Yes. GHD will continue to monitor security advisories and emerging threats as part of its ongoing security and risk management practices.
Additional Support
If you have any questions about your Govstack Platform environment, please contact our team Submit a support request.