Cronofy are aware of two recently published PHP vulnerabilities, CVE-2026-109618 & CVE-2026-109619.
We can confirm that we do not make use of PHP and are therefore unaffected by these vulnerabilities.
Regarding usage of our PHP SDK, we strongly recommend that you upgrade to a version of PHP that includes patches for the two identified vulnerabilities.