PHP is not used anywhere in Framer’s applications, services, or infrastructure, so Framer sites and customer data are not impacted. No action is required from customers.
If you have any additional questions you can reach out to security@framer.com.
Recent PHP vulnerabilities and why Framer is not affected
We’ve received questions about the recent critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Framer and sites hosted on Framer are not affected.
