Short answer

No. The nudge® platform is built on Python and Node.js, and Larky does not run PHP in any production or service-delivery environment. That includes the PHP security advisories published in October 2026 (CVE-2026-109618 and CVE-2026-109619).

What we checked

When a vulnerability is announced in a technology, we don't rely on documentation alone. We:

• Inspect the hosts in our hosted environment for the affected software.
• Search our code repositories for the technology as a dependency.
• Review available monitoring data for signs of exploitation.

Third-party providers

We also checked for any response from our critical third-party providers. As of October 2026, we reviewed their public security communications and our own vendor notices, and found no reports of impact from these advisories. Our providers are managed under a supplier security policy that requires current third-party security attestations for higher-risk vendors, and we will follow up with them if that changes.

Questions?

Contact Larky Support at support@larky.com.