Is PHP2Shell vulnerability applicable to vaultwarden?

[Kage1]

Does VaultWarden have any PHP components in the docker container that could be exploited?

https://nvd.nist.gov/vuln/detail/cve-2026-109618
https://nvd.nist.gov/vuln/detail/cve-2026-109619

https://www.bleepingcomputer.com/news/security/php-warns-admins-of-two-critical-flaws-emergency-patches-coming-tomorrow/

Versions

PHP Group 	PHP Version
Affected     8.2.* < 8.2.35 (semver)
Affected     8.3.* < 8.3.36 (semver)
Affected     8.4.* < 8.4.27 (semver)
Affected     8.5.* < 8.5.12 (semver)

[stefan0xC]

No. This project is mainly written in the Rust programming language and does not rely on any PHP code.