Recently disclosed vulnerabilities affect the PHP interpreter itself, not Ibexa software, so the fixes come through PHP releases rather than Ibexa updates. We are actively monitoring the situation and working with our infrastructure provider, Upsun, to make patched PHP versions available to all projects hosted on Ibexa Cloud. These patched versions will be rolled out automatically, so Ibexa Cloud customers don't need to take any action.
On-premise customers should upgrade their PHP interpreter to the latest patch release as soon as possible. If you are still running PHP 7.3 or older, we strongly recommend moving to a supported PHP version, as these versions no longer receive security fixes.

For more info about Ibexa Cloud please refer to the following incident page: https://status.upsun.com/incidents/2cdvc2ctv5jwb