v2.0.7
AUTODOCS 2.0.7patch
- 2.0.7-SEC-01SecurityResponding to PHP2Shell: Autodocs now runs on TypeScript, and the legacy version has been patchedTo all Autodocs users and customers: there has been recent news of two flaws in the PHP language known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). They allow an attacker to run commands on a server that uses PHP without signing in. The PHP project released fixed versions on 21 October 2026, so the Autodocs team would like to tell you where both versions of the system stand. The current Autodocs is not directly affected by these flaws, because the team has moved its main platform from PHP to TypeScript and the system no longer runs on PHP. The legacy Autodocs still runs on PHP, so the team moved it to PHP 8.4.27, a version that fixes these flaws, on 22 October 2026, Thailand time. As for how the team handles security patches, with every major release, and at least every quarter, the team tests and applies the system's security patches. For a serious vulnerability in a package the system uses, the team starts testing the patch within 48 hours of the package's maintainer releasing the update, and releases the update as soon as testing is complete, without waiting for the regular update round. You do not need to do anything.