Is Trello affected by CVE-2026-115560, or has the vulnerability already been addressed?

Question

https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp

橋 · Answer

CVE-2026-115560 is mentioned in the below:

https://www.php.net/archive/2026.php#2026-10-23-1

I could not go further the contact page after selecting security… and Trello, which shows nothing more.

Arkadiusz Wroblewski · Answer

Hi and Welcome

Community members can’t access Trello's infrastructure or internal security assessments. Please contact Atlassian Support to confirm the status with its security team.

https://support.atlassian.com/contact/

Cheers,

Arek🤠🧙‍♂️

Germán Morales · Answer

Hi 橋, welcome to the Community! One thing to check first: the advisory you linked is a PHP vulnerability published as CVE-2026-109619, not CVE-2026-115560, and I couldn't find any public record for the second ID. It's worth confirming which one your security team is asking about.

Whether Trello runs an affected PHP version is something only Atlassian can confirm. Disclosed vulnerabilities that affect Atlassian products are listed in their security advisories and bulletins, and since Trello is a cloud service, any fix is applied on Atlassian's side with nothing for customers to install. If you need a written statement for this specific CVE, Atlassian Support is the place to ask.