Several security issues were disclosed this week. Here is where Primer stands on the two we’ve been asked about most.
PHP vulnerabilities:
Primer does not use PHP, so our platform and integrations are not affected. If your own site or tools run on PHP (for example WooCommerce), check with your developers or hosting provider and apply the patches.
eMudhra certificate compromise:
On 19 October, private keys for several eMudhra intermediate certificates were reported as compromised. As a precaution, we have updated the certificate trust stores across our services. No action is needed on your Primer integration. Your own website, hosting or CDN providers may be affected separately, so check with them.
No components marked as affected
Monitoring
Several security issues were disclosed this week. Here is where Primer stands on the two we’ve been asked about most.
PHP vulnerabilities:
Primer does not use PHP, so our platform and integrations are not affected. If your own site or tools run on PHP (for example WooCommerce), check with your developers or hosting provider and apply the patches.
eMudhra certificate compromise:
On 19 October, private keys for several eMudhra intermediate certificates were reported as compromised. As a precaution, we have updated the certificate trust stores across our services. No action is needed on your Primer integration. Your own website, hosting or CDN providers may be affected separately, so check with them.