Matomo 5.14.2 is available (security update)

Our Matomo add-on has been updated to version 5.14.2 which is now used by default. This urgent release warns administrators when their installation runs a PHP version affected by the critical vulnerabilities CVE-2026-109618 and CVE-2026-109619. It also updates the CA certificates bundle Matomo uses for outgoing HTTPS requests to composer/ca-bundle 1.6.0.

Updating Matomo alone doesn’t fix these PHP vulnerabilities. On Clever Cloud, we already moved every managed Matomo add-on that ran PHP 8.1 or 8.2 to PHP 8.3, as described in our PHP security update.

You can deploy this release from our Console or Clever Tools. Existing customers’ add-ons are already up to date.

• Learn more about Matomo 5.14.2
• Learn more about Matomo on Clever Cloud