TYPO3-EXT-SA-2026-031: Multiple vulnerabilities in extension "Analytics" (analytics)
It has been discovered that the extension "Analytics" (analytics) is vulnerable to Insecure Direct Object Reference (IDOR) and Broken Access Control.
Read moreTYPO3-EXT-SA-2026-030: Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)
It has been discovered that the extension "Accessible Form Captcha" (bw_captcha) is vulnerable to Captcha Bypass.
TYPO3-EXT-SA-2026-029: Multiple vulnerabilities in extension "sgalinski Cookie Consent" (sg_cookie_optin)
It has been discovered that the extension "sgalinski Cookie Consent" (sg_cookie_optin) is vulnerable to SQL Injection and Missing Authorization.
TYPO3-EXT-SA-2026-028: Broken Access Control in extension "FAL Protect" (fal_protect)
It has been discovered that the extension "FAL Protect" (fal_protect) is vulnerable to Broken Access Control.
Beyond the Rim of the Plate: Notes From Kirby Konf 2026
On 25–26 September 2026, I spent two days in Mainz, Germany, at the first conference for the Kirby CMS. The crowd was mostly designers rather than developers, and their take on AI, sustainability, and community gave a developer like me plenty to think about.
TYPO3 Association Joins the European Open Source Academy’s Partner Program
Unanimously approved by the TYPO3 Association Board and funded by the Community Expansion Committee, the partnership starts 1 November 2026. It creates opportunities for joint work on open source policy, skill transfer, and sustainable local business models across Europe.
TYPO3 Association Members to Vote on New Governance Structure
Proposed bylaw amendments introduce Units and a Unit Cooperation Panel to organize volunteer work on TYPO3 CMS, giving the product its own governance alongside the Board and the Business Control Committee. Online voting runs 21–29 October 2026, and the changes need a two-thirds majority.
Optimizing AI Search & GEO for TYPO3 Websites: From Win the Click to Win the Answer
From rankings to AI-generated answers: discover how TYPO3 websites can improve their visibility in AI search through GEO, content, and strong brand signals.
Also Light-Years Ahead of its Reputation: Notes From DrupalCon Rotterdam 2026
In late September, I spent three days among Drupal’s European community in the Netherlands. Between an awards night on an ocean liner and a trivia night where I lost points for complaining, I found that our cousin’s biggest worry is one TYPO3 shares.
The Great Content Rescue: How TYPO3 Turned a Massive Legacy Website Into a Future-Ready Platform
At the TYPO3 North America Summit, Kai Unterberg of KM2 >> showed how automated migration rescued 50,000 fragmented content elements on Gerresheimer’s website.