A security issue involving eMudhra, a third-party certificate authority. We updated affected certificate bundles as a precaution and found no evidence that Notion was compromised.

eMudhra certificate authority

We are aware of a security issue involving eMudhra, a third-party certificate authority used to verify secure internet connections. Our security and engineering teams are assessing potential exposure and proactively updating affected software and certificate bundles across our services and applications. At this time, we have not identified evidence that Notion has been compromised in connection with this issue. This work is a preventative security measure, rather than a response to a service outage. We’re taking precautionary steps to update affected certificate-validation components and block trust in the affected certificates where needed.

Our security and engineering teams assessed potential exposure to the eMudhra certificate authority issue and proactively updated affected software and certificate bundles across our services and applications. We did not find any evidence that Notion has been compromised in connection with this issue.

Remote code execution in PHP. Notion does not run PHP in any customer-facing service, so we are not affected.

PHP2Shell

We currently don't believe we're affected by PHP2Shell (CVE-2026-109618, CVE-2026-109619). Notion does not run PHP in any customer-facing service. We will update this entry if that changes.

Fang opp

Finn

Automatiser

Security advisories

eMudhra certificate authority

PHP2Shell