Skip to main content
Scaleway

[Serverless Functions][fr-par/nl-ams/pl-waw] Security updates applied to PHP and Node.js runtimes

Degraded Lasted 51m · started · Scaleway's page

Level
confirmed
Worst impact
Degraded
Components
fr-par-1, fr-par-2, fr-par-3, nl-ams-1, nl-ams-2, nl-ams-3, pl-waw-1, pl-waw-2, pl-waw-3, Serverless Functions
Down Index
20of 100

What to do

  • Check whether you use Scaleway fr-par-1, fr-par-2, fr-par-3, nl-ams-1 and 6 more. Check your stack

    Paste a package.json, lockfile, Terraform or a list of domains at down.guide/stack to see every provider you depend on.
  • Confirm your retries, queues and scheduled jobs caught up after the 51m it lasted.

    Anything that failed between 2026-10-22 15:18 UTC and 2026-10-22 16:10 UTC may need a replay.
  • Subscribe to Scaleway's feed to hear about the next one first. RSS feed

    https://down.guide/feed?provider=scaleway works in Slack (/feed subscribe), Discord feed bots and any RSS reader.

Updates from Scaleway 3

  1. investigating

    We are informing you of critical security updates applied to the PHP and Node.js runtimes used by Serverless Functions. --- PHP Two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2) allow remote code execution without credentials on PHP versions prior to the fixed releases (8.2.35, 8.3.36, 8.4.27, 8.5.12). Actions taken: - Functions previously running PHP 8.2 or 8.3 have been force-redeployed on PHP 8.4, which is patched. - Functions running PHP 8.4 or 8.5 have been force-redeployed on the patched versions (8.4.27 / 8.5.12). Impact for you: - PHP 8.2 and 8.3 are now end-of-life on our platform: they can no longer be used to create or redeploy functions. Please update your runtime to PHP 8.4 or 8.5. - If you manage your functions through Infrastructure as Code (Terraform or Serverless Framework with serverless.yaml), please update your configuration to the new runtime, otherwise your infrastructure will drift. --- Node.js Patched versions of Node.js 22, 24 and 26 are now available (22.23.4, 24.22.1, 26.12.1). To apply the security patches, please redeploy your functions. If you experience any issue, please contact our support team. We apologize for any inconvenience and thank you for your patience.

    provider

  2. monitoring

    A fix has been implemented and we are monitoring the results.

    provider

  3. resolved

    This incident has been resolved.

    provider

Reports count in aggregate; nothing about you is shown.

Corrections

None so far.

Something wrong on this page? Report an error or send us a note. Every fix is listed here.

Questions about DWN-904fc711ee

Is Scaleway still down?

No, this incident was resolved 2026-10-22 16:10 UTC. For Scaleway's live state, see https://down.guide/scaleway.

How long did it last?

51m, from 2026-10-22 15:18 UTC to 2026-10-22 16:10 UTC, by the times Scaleway posted.

What was affected?

Scaleway named fr-par-1, fr-par-2, fr-par-3, nl-ams-1 and 6 more.

What caused it?

Scaleway hasn't published a root cause. If it does, it shows here.

Where does this come from?

Scaleway's official status page, https://status.scaleway.com, quoted verbatim. down.guide's own probes, reports and social counts are labeled as ours.