News
1 min read
PHP and Node.js security updates installed
PHP and Node.js both released security updates on 21 October 2026. LemonBooking runs on both, so we installed them the same day. There was no downtime, and there’s nothing you need to do.
PHP and Node.js are two of the building blocks LemonBooking runs on. When either of them fixes a security flaw, we install the fix on every LemonBooking server as soon as it’s available.
What happened
- Before the releases — we posted a notice on our status page that both updates were on their way, and that we didn’t expect any downtime.
- When PHP released its update — until it was installed, LemonBooking was running a version of PHP with a known security flaw, so our status page showed the service as degraded.
- Later the same day — every LemonBooking server was running PHP 8.5.12, that day’s security release. Amazon Web Services keeps the parts of LemonBooking that run Node.js up to date for us.
What it means for you
Nothing changes in how LemonBooking works. Your bookings, payments and website kept running throughout, and there’s nothing to install or switch on.
Keep an eye on our status page.
We post incidents and planned maintenance on our status page, with each update as it happens.