Author: Oliver Hader
Oliver started to work with TYPO3 in 2005 and was fascinated by the product and its universe. Since 2007 he is member of the TYPO3 Core Team. After going back to university in 2014 for achieving a postgraduate master degree in internet web science, he is now researching on advanced web technology topics in general and for TYPO3 in particular. In his spare time, Oliver loves to go cycling cross-country in the uplands around Hof (Germany) in northern Bavaria - at the region where he's living as well.
TYPO3 11.5.7 and 10.4.25 maintenance releases published
The versions 11.5.7 and 10.4.25 of the TYPO3 Enterprise Content Management System have just been released.
Read moreTYPO3-PSA-2022-001: Sanitization bypass in SVG Sanitizer
Third-party package enshrined/svg-sanitize, used by TYPO3 core packages, was susceptible to bypassing the sanitization strategy.
TYPO3 11.5.6 and 10.4.24 maintenance releases published
The versions 11.5.6 and 10.4.24 of the TYPO3 Enterprise Content Management System have just been released.
TYPO3 11.5.5 and 10.4.23 maintenance releases published
The versions 11.5.5 and 10.4.23 of the TYPO3 Enterprise Content Management System have just been released.
TYPO3 11.5.3 maintenance release published
The version 11.5.3 of the TYPO3 Enterprise Content Management System has just been released.
TYPO3-CORE-SA-2021-015: HTTP Host Header Injection in Request Handling
It has been discovered that TYPO3 CMS is vulnerable to HTTP header injection.
TYPO3-CORE-SA-2021-014: Cross-Site-Request-Forgery in Backend URI Handling
It has been discovered that TYPO3 CMS is vulnerable to cross-site-request-forgery.
TYPO3 10.4.21 and 9.5.31 maintenance releases published
The versions 10.4.21 and 9.5.31 of the TYPO3 Enterprise Content Management System have just been released.
TYPO3 10.4.20, 9.5.30 and 11.3.3 maintenance releases published
The versions 10.4.20, 9.5.30 and 11.3.3 of the TYPO3 Enterprise Content Management System have just been released.
About the Latest TYPO3 Core Security Release
The security releases published on Tuesday, August 10, 2021, contained a very important security bug fix. It removes malicious and incorrect HTML from rich-text-enabled fields. However, it has also caused problems for a number of sites.