# Typeform: Trust page changed

> Typeform’s Trust page added a security update about critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, stating that its security and engineering teams began preparing after advance notice. An older compliance-update entry was removed; customers have a new advisory to review, but the e

Canonical: https://rewindex.com/change/p6259
Last updated: 2026-10-23T08:59:59Z

**Summary:** Typeform’s Trust page added a security update about critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, stating that its security and engineering teams began preparing after advance notice. An older compliance-update entry was removed; customers have a new advisory to review, but the excerpt does not establish Typeform’s exposure or completed remediation. _(machine-written, sol)_
- Kind: Trust / security · Label: Changed (not classified) (rule)
- Changed: 2026-10-23 08:59 UTC · Detected: 2026-10-23 08:59 UTC
- [Source: https://trust.typeform.com](https://trust.typeform.com)
- [Company: Typeform](https://rewindex.com/company/typeform.md)
- Versions: before page\_version:1049 → after page\_version:6259
- Change 1 of 3 for this page

## What changed

**1. Added**

```diff
  …a list of your subprocessors? Updates View all
+ Security Security update: PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619) Published ‹date› On ‹date› , the PHP project published a security advisory Opens in new tab for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619. They affect a wide range of web infrastructure across the industry. Our security and engineering teams began preparing as soon as the PHP project gave advance notice of the release. Before the fixes were available, we applied the interim mitigations recommended in the advisory and put additional protective measures in place across our environment. These included updated web application firewall rules and further security hardening, along with deploying the patched PHP releases, which address both vulnerabilities. At this time, we have no indication that customer data has been affected. No action is required from you. We’ll update this page if the situation changes. Read more Read more about Security update: PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)
  General 2026 Security & Compliance Updates Now Available…
```

**2. Removed**

```diff
  …Read more about HECVAT and Trust Centre Updates
- General Pleased to Share Our Latest Security & Compliance Updates Published ‹date› Maintaining a secure and trustworthy platform is at the core of what we do, and we're happy to report on our team's latest achievements in this ongoing effort. We have successfully completed our scheduled surveillance audit for ISO/IEC 27001 , 27017 , and 27018 . Alongside these, our new
  SOC 2 Type II and HIPAA compliance reports…
```

**3. Removed**

```diff
  …our new SOC 2 Type II and HIPAA
- compliance reports are also finalized and ready! We take pride in this consistent work and hope it provides you with continued confidence while making your own due diligence process a little smoother. You can find all our new reports waiting for you in our resources
  Opens in new tab . Read more Read…
```

**4. Removed**

```diff
  …new tab . Read more Read more about
- Pleased to Share Our Latest Security & Compliance
  Updates Opens in new tab Ask Typeform a…
```

**5. Removed**

```diff
  …How does Typeform handle access controls and authentication?
- What are the key security controls mentioned in the Typeform Trust Center?
  What compliance frameworks and certifications does Typeform follow?…
```

## History of this page

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-10-23 08:59 UTC | Trust page changed (this change) | Changed (not classified) |
| 2026-11-03 08:58 UTC | [Trust page changed](https://rewindex.com/change/p13861.md) | Changed (not classified) |
| 2026-11-04 08:58 UTC | [Trust page changed](https://rewindex.com/change/p14676.md) | Changed (not classified) |

Next: [change](https://rewindex.com/change/p13861.md) · All Typeform changes: [timeline](https://rewindex.com/company/typeform/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._

## Cite this

Trust page changed on Typeform’s Trust page, changed 2026-10-23 08:59 UTC (change 1 of 3).

- Canonical URL: https://rewindex.com/change/p6259
- Citation: Typeform, “Trust page changed” (2026-10-23 08:59 UTC). Archived by Rewindex: https://rewindex.com/change/p6259 (CC BY 4.0).
- Markdown link: `[Typeform: Trust page changed (2026-10-23)](https://rewindex.com/change/p6259)`


---
Canonical: https://rewindex.com/change/p6259 · Markdown: https://rewindex.com/change/p6259.md · JSON: https://rewindex.com/api/v1/changes/p6259 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T13:31:35.771Z