This Month in TYPO3: January 2026
New year, new vibe. The v14.1 announcement and Camino, the new default theme, give TYPO3 a fresh look, and security releases keep production calm. A thoughtful note on open-source AI stewardship and four funded community ideas for Round One 2026 set an optimistic tone for the year.
Read moreIntroducing Camino – TYPO3's New Default Theme
Earlier this month we saw the release of TYPO3 14.1 and with it came the introduction of Camino – TYPO3’s new default theme.
Members Have Selected Four Ideas to be Funded in Round One 2026
The TYPO3 Association member poll for Round One in 2026 budget ideas has been finished and this time four winning ideas will be funded by the TYPO3 Association.
TYPO3 Association Board Report January–August 2025
This report gives insights into the TYPO3 Association Board’s activities during the first eight months of 2025, as well as some background information on ongoing projects and processes. It also recaps the General Assembly and gives insights into the Board’s strategic focus areas for the year.
Open Source, AI, and the Need for Shared Stewardship
In this conversation starter, Olivier Dobberkau outlines the pressures facing open source in the age of AI, and invites the TYPO3 community to rethink stewardship, responsibility, and sustainability together.
TYPO3 v14.1—New Look, New Feel
The second sprint release of the TYPO3 v14 series comes with an awesome frontend theme out-of-the-box, further user interface optimization in the backend, a new module to generate QR codes, plus a range of updates and improvements.
TYPO3-EXT-SA-2026-004: Vulnerability in bundled package in extension "Amazon AWS SDK" (aws)
It has been discovered that the extension "Amazon AWS SDK" (aws) bundles a vulnerable version of “aws/aws-sdk-php“ which is susceptible to use of a Broken or Risky Cryptographic Algorithm.
TYPO3-EXT-SA-2026-003: Vulnerability in bundled package in extension "Amazon Web Services (AWS) Toolbox" (aws_tools)
It has been discovered that the extension "Amazon Web Services (AWS) Toolbox" (aws_tools) bundles a vulnerable version of “aws/aws-sdk-php“ which is susceptible to use of a Broken or Risky Cryptographic Algorithm.
TYPO3-EXT-SA-2026-002: Vulnerability in bundled package in extension "AWS SDK for PHP" (aws_sdk_php)
It has been discovered that the extension "AWS SDK for PHP" (aws_sdk_php) bundles a vulnerable version of “aws/aws-sdk-php“ which is susceptible to use of a Broken or Risky Cryptographic Algorithm.
TYPO3-EXT-SA-2026-001: Insecure Deserialization in extension "Mailqueue" (mailqueue)
It has been discovered that the extension "Mailqueue" (mailqueue) is vulnerable to insecure deserialization.