All security advisories

PHP2Shell

Not affected

Remote code execution in PHP. Notion does not run PHP in any customer-facing service, so we are not affected.

CVE-2026-109618, CVE-2026-109619 · Updated

Updates

  1. Not affected

    We currently don't believe we're affected by PHP2Shell (CVE-2026-109618, CVE-2026-109619). Notion does not run PHP in any customer-facing service. We will update this entry if that changes.