Our response to the PHP and Node.js vulnerabilities (October 23, 2026)

Thank you for using Japan Medical Press.

We have checked whether the critical PHP vulnerabilities and the Node.js vulnerabilities announced on October 21, 2026, affect this site. As of 10:00 p.m. JST on October 23, the situation is as follows.

・Japan Medical Press (articles, Find a Hospital, and Find a Medicine) does not use PHP.

・Our pages are prebuilt files served by Cloudflare. No PHP or Node.js program runs on a server when you open a page.

・JMP AI, including email sign-up, runs on Cloudflare Workers and does not use Node.js.

・The Node.js we use to build the site has been updated to the patched version.

As of now, we have found no unauthorized access or data leaks related to these vulnerabilities. You do not need to do anything.

If you have any questions, please contact us at contact@japanmedicalpress.com.

All news