Security Update – Enalyzer Not Affected by PHP Vulnerabilities
In light of recent reports concerning security vulnerabilities affecting PHP-based systems, we would like to confirm that Enalyzer is not affected.
Enalyzer does not use PHP as part of its technology stack and is therefore not exposed to the reported PHP-specific vulnerabilities.
We continuously monitor security developments and maintain our platform in accordance with established security practices.
No action is required from Enalyzer customers.
Security Update – Node.js Brotli Vulnerability
Enalyzer’s production services are not affected by the Node.js Brotli decoder vulnerability referenced in the NCSC advisory. Node.js is used only to build our web front end; the resulting static files are served without Node.js.
Our production components that include Brotli (.NET and headless Chrome) do not decompress externally supplied Brotli data. The vulnerable code path is therefore not exposed. All platform traffic also passes through a web application firewall.
No emergency production patch is required for this Node.js vulnerability. Our build and deployment process incorporates security updates from maintained vendor images.
We have not identified any indicators of compromise or malicious activity related to this vulnerability.
No action is required from Enalyzer customers.