Scaleway CVEs
No CVEs are mapped to Scaleway’s software or packages. 4 of our archived Scaleway incidents name a CVE or say Scaleway is not affected; they are listed below.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. Same list on the all-vendor CVE index.
Scaleway incidents that mention a CVE
[Serverless Functions][fr-par/nl-ams/pl-waw] Security updates applied to PHP and Node.js runtimes
CVE-2026-109618 names this CVE CVE-2026-109619 names this CVE
P2 - [WEBHOSTING] - PHP Emergency maintenance
CVE-2026-109618 names this CVE CVE-2026-109619 names this CVE
[BookMyName][Security] Emergency maintenance - BMN services unavailable
CVE-2026-109618 names this CVE CVE-2026-109619 names this CVE
Only explicit links are shown: the incident text names the CVE id, or Scaleway’s notice says it is not affected. A mention is not a statement of cause.
All vendors’ CVEs · JSON · Markdown
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)