Posts by date: 2026 / 10 en https://news.typo3.com/article/archive/2026/october/blog.archive.xml Mon, 26 Oct 2026 13:48:30 +0100 https://news.typo3.com/article/relaunch-redirects-extension-finds-broken-urls-before-the-go-livehttps://news.typo3.com/article/relaunch-redirects-extension-finds-broken-urls-before-the-go-live#commentsMon, 26 Oct 2026 00:00:00 +0100Paul Meierhttps://news.typo3.com/article/relaunch-redirects-extension-finds-broken-urls-before-the-go-liveA new TYPO3 extension checks a site’s old URLs on a staging system, flags those that would end in a 404 page-not-found error, and proposes redirects. A console command can also stop a deployment when old links would fail. https://news.typo3.com/article/typo3-14310-13437-12451-11556-and-10462-maintenance-releases-publishedhttps://news.typo3.com/article/typo3-14310-13437-12451-11556-and-10462-maintenance-releases-published#commentsThu, 22 Oct 2026 11:00:00 +0200Benni MackAndreas Kienasthttps://news.typo3.com/article/typo3-14310-13437-12451-11556-and-10462-maintenance-releases-publishedThe versions 14.3.10, 13.4.37, 12.4.51, 11.5.56 and 10.4.62 of the TYPO3 Enterprise Content Management System have just been released. https://news.typo3.com/article/typo3-association-board-meeting-protocol-30-september-2026https://news.typo3.com/article/typo3-association-board-meeting-protocol-30-september-2026#commentsThu, 22 Oct 2026 00:00:00 +0200Martin Helmichhttps://news.typo3.com/article/typo3-association-board-meeting-protocol-30-september-2026Proposed term limits for board and BCC members, a one-week online vote on new by-laws ahead of a short General Assembly on 29 October, and lessons from open source events in North America topped the board’s agenda. https://news.typo3.com/article/whats-new-in-ddev-for-typo3-folks-october-2026https://news.typo3.com/article/whats-new-in-ddev-for-typo3-folks-october-2026#commentsWed, 21 Oct 2026 17:35:39 +0200Randy Fayhttps://news.typo3.com/article/whats-new-in-ddev-for-typo3-folks-october-2026October’s DDEV update for TYPO3 developers is about databases: seeded snapshots, a database per branch, and faster throwaway instances. Several of the new tools come from TYPO3 community members, and the update ends with how agencies can help sustain DDEV. https://news.typo3.com/article/typo3-psa-2026-001https://news.typo3.com/article/typo3-psa-2026-001#commentsWed, 21 Oct 2026 17:15:29 +0200Luana Valentinihttps://news.typo3.com/article/typo3-psa-2026-001Two critical security vulnerabilities in PHP require prompt action: all TYPO3 users should update PHP on their installations right away. TYPO3 itself is not affected and does not need to be updated. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-036https://news.typo3.com/security/advisory/typo3-ext-sa-2026-036#commentsTue, 20 Oct 2026 11:08:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-036It has been discovered that the extension "TYPO3 Shop by coding.ms" (shop) is vulnerable to Broken Access Control. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-035https://news.typo3.com/security/advisory/typo3-ext-sa-2026-035#commentsTue, 20 Oct 2026 11:07:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-035It has been discovered that the extension “TYPO3 AI Integration Extension” (ns_t3ai) is vulnerable to SQL Injection and Sensitive Data Exposure. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-034https://news.typo3.com/security/advisory/typo3-ext-sa-2026-034#commentsTue, 20 Oct 2026 11:06:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-034It has been discovered that the extension "File manager" (ameos_filemanager) is vulnerable to SQL Injection. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-033https://news.typo3.com/security/advisory/typo3-ext-sa-2026-033#commentsTue, 20 Oct 2026 11:05:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-033It has been discovered that the extension "TYPO3 Fluid-Form by coding.ms" (fluid_form) is vulnerable to Cross-Site Scripting and Broken Access Control. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-032https://news.typo3.com/security/advisory/typo3-ext-sa-2026-032#commentsTue, 20 Oct 2026 11:04:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-032It has been discovered that the extension "Kitodo.Presentation" (dlf) is vulnerable to Server-Side Request Forgery. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-031https://news.typo3.com/security/advisory/typo3-ext-sa-2026-031#commentsTue, 20 Oct 2026 11:03:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-031It has been discovered that the extension "Analytics" (analytics) is vulnerable to Insecure Direct Object Reference (IDOR) and Broken Access Control. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-030https://news.typo3.com/security/advisory/typo3-ext-sa-2026-030#commentsTue, 20 Oct 2026 11:02:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-030It has been discovered that the extension "Accessible Form Captcha" (bw_captcha) is vulnerable to Captcha Bypass. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-029https://news.typo3.com/security/advisory/typo3-ext-sa-2026-029#commentsTue, 20 Oct 2026 11:01:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-029It has been discovered that the extension "sgalinski Cookie Consent" (sg_cookie_optin) is vulnerable to SQL Injection and Missing Authorization. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-028https://news.typo3.com/security/advisory/typo3-ext-sa-2026-028#commentsTue, 20 Oct 2026 11:00:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-028It has been discovered that the extension "FAL Protect" (fal_protect) is vulnerable to Broken Access Control. https://news.typo3.com/article/beyond-the-rim-of-the-plate-notes-from-kirby-konf-2026https://news.typo3.com/article/beyond-the-rim-of-the-plate-notes-from-kirby-konf-2026#commentsTue, 20 Oct 2026 00:00:00 +0200Martin Helmichhttps://news.typo3.com/article/beyond-the-rim-of-the-plate-notes-from-kirby-konf-2026On 25–26 September 2026, I spent two days in Mainz, Germany, at the first conference for the Kirby CMS. The crowd was mostly designers rather than developers, and their take on AI, sustainability, and community gave a developer like me plenty to think about. https://news.typo3.com/article/typo3-association-joins-the-european-open-source-academys-partner-programhttps://news.typo3.com/article/typo3-association-joins-the-european-open-source-academys-partner-program#commentsMon, 19 Oct 2026 00:00:00 +0200Mathias Bolt Lesniakhttps://news.typo3.com/article/typo3-association-joins-the-european-open-source-academys-partner-programUnanimously approved by the TYPO3 Association Board and funded by the Community Expansion Committee, the partnership starts 1 November 2026. It creates opportunities for joint work on open source policy, skill transfer, and sustainable local business models across Europe. https://news.typo3.com/article/typo3-association-members-to-vote-on-new-governance-structurehttps://news.typo3.com/article/typo3-association-members-to-vote-on-new-governance-structure#commentsThu, 15 Oct 2026 21:15:00 +0200Stefan Busemannhttps://news.typo3.com/article/typo3-association-members-to-vote-on-new-governance-structureProposed bylaw amendments introduce Units and a Unit Cooperation Panel to organize volunteer work on TYPO3 CMS, giving the product its own governance alongside the Board and the Business Control Committee. Online voting runs 21–29 October 2026, and the changes need a two-thirds majority. https://news.typo3.com/article/optimizing-ai-search-geo-for-typo3-websiteshttps://news.typo3.com/article/optimizing-ai-search-geo-for-typo3-websites#commentsThu, 15 Oct 2026 07:00:00 +0200Beat KöckFrank Näglerhttps://news.typo3.com/article/optimizing-ai-search-geo-for-typo3-websitesFrom rankings to AI-generated answers: discover how TYPO3 websites can improve their visibility in AI search through GEO, content, and strong brand signals. https://news.typo3.com/article/also-light-years-ahead-of-its-reputation-notes-from-drupalcon-rotterdam-2026https://news.typo3.com/article/also-light-years-ahead-of-its-reputation-notes-from-drupalcon-rotterdam-2026#commentsWed, 14 Oct 2026 12:30:00 +0200Mathias Bolt Lesniakhttps://news.typo3.com/article/also-light-years-ahead-of-its-reputation-notes-from-drupalcon-rotterdam-2026In late September, I spent three days among Drupal’s European community in the Netherlands. Between an awards night on an ocean liner and a trivia night where I lost points for complaining, I found that our cousin’s biggest worry is one TYPO3 shares. https://news.typo3.com/article/the-great-content-rescuehttps://news.typo3.com/article/the-great-content-rescue#commentsTue, 13 Oct 2026 11:43:26 +0200Kendall Littonhttps://news.typo3.com/article/the-great-content-rescueAt the TYPO3 North America Summit, Kai Unterberg of KM2 >> showed how automated migration rescued 50,000 fragmented content elements on Gerresheimer’s website. https://news.typo3.com/article/typo3-1439-security-release-publishedhttps://news.typo3.com/article/typo3-1439-security-release-published#commentsTue, 13 Oct 2026 11:30:00 +0200Benni Mackhttps://news.typo3.com/article/typo3-1439-security-release-publishedThe version 14.3.9 of the TYPO3 Enterprise Content Management System has just been released. https://news.typo3.com/security/advisory/typo3-core-sa-2026-024https://news.typo3.com/security/advisory/typo3-core-sa-2026-024#commentsTue, 13 Oct 2026 11:00:00 +0200Elias Häußlerhttps://news.typo3.com/security/advisory/typo3-core-sa-2026-024It has been discovered that TYPO3 CMS is susceptible to ignored upload storage configuration in the Form Framework. https://news.typo3.com/article/typed-content-models-for-typo3https://news.typo3.com/article/typed-content-models-for-typo3#commentsMon, 12 Oct 2026 00:00:00 +0200Hannes Lauhttps://news.typo3.com/article/typed-content-models-for-typo3Funded through the TYPO3 community budget, the new Content Models extension gives developers a structured way to work with pages, content elements, and other records managed by TYPO3. https://news.typo3.com/article/typo3-10461-11555-and-12450-elts-releasedFri, 09 Oct 2026 13:50:00 +0200Andreas Kienasthttps://news.typo3.com/article/typo3-10461-11555-and-12450-elts-releasedStill sticking to an older version of TYPO3? Today, 10.4.61, 11.5.55, and 12.4.50 have been released. Staying on top of maintenance updates should be a top priority - Gain peace of mind by opting for one of TYPO3 GmbH’s Extended Support offers! https://news.typo3.com/article/typo3-1438-and-13436-maintenance-releases-publishedhttps://news.typo3.com/article/typo3-1438-and-13436-maintenance-releases-published#commentsFri, 09 Oct 2026 11:30:00 +0200Benni Mackhttps://news.typo3.com/article/typo3-1438-and-13436-maintenance-releases-publishedThe versions 14.3.8 and 13.4.36 of the TYPO3 Enterprise Content Management System have just been released. https://news.typo3.com/article/ter-speaks-composerjson-nowhttps://news.typo3.com/article/ter-speaks-composerjson-now#commentsFri, 09 Oct 2026 00:00:00 +0200Benni Mackhttps://news.typo3.com/article/ter-speaks-composerjson-nowThe TYPO3 Extension Repository (TER) now accepts extensions with composer.json as their only manifest. Authors no longer need an ext_emconf.php file to upload, and for versions that require TYPO3 v14.3 or newer, TER publishes the exact archive the author uploaded. https://news.typo3.com/article/v115-elts-year-3https://news.typo3.com/article/v115-elts-year-3#commentsThu, 08 Oct 2026 06:09:00 +0200Luana Valentinihttps://news.typo3.com/article/v115-elts-year-3Ensure uninterrupted support for TYPO3 v11.5 with ELTS year 3. Renew by Nov 1, 2026, for security updates and peace of mind through October 2027. https://news.typo3.com/article/extbase-and-translations-the-full-picturehttps://news.typo3.com/article/extbase-and-translations-the-full-picture#commentsWed, 07 Oct 2026 00:00:00 +0200Anja Leichsenringhttps://news.typo3.com/article/extbase-and-translations-the-full-pictureAnja Leichsenring reports on the first chapter delivered in the second round of community-funded Extbase documentation work. https://news.typo3.com/article/typo3-camp-africa-brings-public-sector-and-web-professionals-together-in-kenyahttps://news.typo3.com/article/typo3-camp-africa-brings-public-sector-and-web-professionals-together-in-kenya#commentsMon, 05 Oct 2026 12:30:20 +0200Alina Fleserhttps://news.typo3.com/article/typo3-camp-africa-brings-public-sector-and-web-professionals-together-in-kenyaThe TYPO3 Community Expansion Committee invites government digital leaders and developers from across the continent to Diani Beach in December for workshops, peer learning, and networking around open-source public websites. Registration is open, with 60 places available. https://news.typo3.com/article/meet-the-typo3-dev-companion-typo3-knowledge-for-your-coding-agenthttps://news.typo3.com/article/meet-the-typo3-dev-companion-typo3-knowledge-for-your-coding-agent#commentsMon, 05 Oct 2026 00:00:00 +0200Benjamin Kotthttps://news.typo3.com/article/meet-the-typo3-dev-companion-typo3-knowledge-for-your-coding-agentCoding agents read a TYPO3 project well, but know TYPO3 badly. The TYPO3 Dev Companion fixes that: a small, local, read-only server that gives your agent version-bound TYPO3 knowledge, answers from your own installation, and step-by-step workflows for real TYPO3 tasks.