Skip to content

docs(architecture): add PHP CVE notice to tech stack page #176

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
anttiviljami wants to merge 1 commit into
base: main
Choose a base branch
from
Open

docs(architecture): add PHP CVE notice to tech stack page #176

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions docs/architecture/overview.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,12 @@ sidebar_position: 1

# Tech Stack & Architecture

:::caution Security notice: PHP RCE vulnerabilities (October 2026)
epilot is **not affected** by the "php2shell" PHP remote code execution vulnerabilities disclosed on October 21, 2026 ([CVE-2026-109618](https://www.cve.org/CVERecord?id=CVE-2026-109618), [CVE-2026-109619](https://www.cve.org/CVERecord?id=CVE-2026-109619)). epilot does not use PHP anywhere in its platform.

epilot runs on a [serverless Node.js stack](#tech-stack) on AWS Lambda, where AWS automatically applies security updates to the managed runtimes.
:::

:::info

_epilot_ is a multi-tenant SaaS platform for energy suppliers, municipal utilities, grid operators, and solution providers. It provides a 360° energy XRM (extended relationship management) to digitize sales, service, and grid processes end-to-end.
Expand Down
Loading