{
  "meta": {
    "version": "v1",
    "pricing": {
      "public": {
        "label": "Public",
        "description": "Read-only API access for lightweight status checks and public integrations."
      },
      "premium": {
        "label": "Premium",
        "description": "API keys with higher hourly quotas, plus Slack, Teams, Discord, webhook, and email outage alerts across your vendor stack."
      }
    },
    "generatedAt": "2026-10-22T22:11:49.621Z"
  },
  "data": {
    "id": "incident_statuspage_scaleway_wn4wy3l5mhkq",
    "slug": "scaleway-serverless-functions-fr-par-nl-ams-pl-waw-security-updates-applied-to-2026-10-22-y3l5mhkq",
    "title": "[Serverless Functions][fr-par/nl-ams/pl-waw] Security updates applied to PHP and Node.js runtimes",
    "summary": "[Serverless Functions][fr-par/nl-ams/pl-waw] Security updates applied to PHP and Node.js runtimes",
    "status": "resolved",
    "stale": false,
    "severity": "minor",
    "startedAt": "2026-10-22T15:18:59.512+00:00",
    "updatedAt": "2026-10-22T16:10:12.862+00:00",
    "resolvedAt": "2026-10-22T16:10:12.84+00:00",
    "provider": {
      "slug": "scaleway",
      "name": "Scaleway"
    },
    "affectedServices": [
      {
        "slug": "scaleway-zones",
        "name": "Availability Zones"
      },
      {
        "slug": "scaleway-products",
        "name": "Cloud Products"
      }
    ],
    "links": {
      "html": "/incidents/scaleway-serverless-functions-fr-par-nl-ams-pl-waw-security-updates-applied-to-2026-10-22-y3l5mhkq",
      "api": "/api/v1/incidents/scaleway-serverless-functions-fr-par-nl-ams-pl-waw-security-updates-applied-to-2026-10-22-y3l5mhkq",
      "providerHtml": "/providers/scaleway",
      "alerts": "https://outagedeck.com/account?stack=scaleway&utm_source=api&utm_medium=response&utm_campaign=api_alerts&utm_content=incident"
    },
    "impactSummary": "Scaleway reported a minor event for the affected tracked services.",
    "source": {
      "id": "source_scaleway_status",
      "kind": "official_api",
      "name": "Scaleway Status",
      "checkedAt": "2026-10-22T22:10:10.1+00:00",
      "stale": false,
      "officialUrl": "https://status.scaleway.com",
      "statusPageUrl": "https://status.scaleway.com"
    },
    "updates": [
      {
        "id": "update_statuspage_scaleway_wn4wy3l5mhkq_lx4f1f9hbfxt",
        "status": "investigating",
        "body": "We are informing you of critical security updates applied to the PHP and Node.js runtimes used by Serverless Functions.\n\n---\nPHP\n\nTwo critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2) allow remote code execution without credentials on PHP versions prior to the fixed releases (8.2.35, 8.3.36, 8.4.27, 8.5.12).\n\nActions taken:\n- Functions previously running PHP 8.2 or 8.3 have been force-redeployed on PHP 8.4, which is patched.\n- Functions running PHP 8.4 or 8.5 have been force-redeployed on the patched versions (8.4.27 / 8.5.12).\n\nImpact for you:\n- PHP 8.2 and 8.3 are now end-of-life on our platform: they can no longer be used to create or redeploy functions. Please update your runtime to PHP 8.4 or 8.5.\n- If you manage your functions through Infrastructure as Code (Terraform or Serverless Framework with serverless.yaml), please update your configuration to the new runtime, otherwise your infrastructure will drift.\n\n---\nNode.js\n\nPatched versions of Node.js 22, 24 and 26 are now available (22.23.4, 24.22.1, 26.12.1). To apply the security patches, please redeploy your functions.\n\nIf you experience any issue, please contact our support team.\n\nWe apologize for any inconvenience and thank you for your patience.",
        "createdAt": "2026-10-22T15:18:59.805+00:00"
      },
      {
        "id": "update_statuspage_scaleway_wn4wy3l5mhkq_ybdt8y0j0fy9",
        "status": "monitoring",
        "body": "A fix has been implemented and we are monitoring the results.",
        "createdAt": "2026-10-22T15:28:41.447+00:00"
      },
      {
        "id": "update_statuspage_scaleway_wn4wy3l5mhkq_f0m8ncwj780x",
        "status": "resolved",
        "body": "This incident has been resolved.",
        "createdAt": "2026-10-22T16:10:12.84+00:00"
      }
    ],
    "access": {
      "plan": "public",
      "keyed": false
    }
  }
}