TYPO3-PSA-2022-001: Sanitization bypass in SVG Sanitizer
Third-party package enshrined/svg-sanitize, used by TYPO3 core packages, was susceptible to bypassing the sanitization strategy.
Read moreTYPO3-EXT-SA-2022-004: File Content Injection in extension "Hardcoded text to Locallang" (mqk_locallangtools)
It has been discovered that the extension "Hardcoded text to Locallang" (mqk_locallangtools) is susceptible to File Content Injection.
TYPO3-EXT-SA-2022-003: Insecure direct object reference in extension "Varnishcache" (varnishcache)
It has been discovered that the extension "Varnishcache" (varnishcache) is susceptible to Insecure direct object reference.
TYPO3-EXT-SA-2022-002: Cross-Site Scripting in extension "Bookdatabase" (extbookdatabase)
It has been discovered that the extension "Bookdatabase" (extbookdatabase) is susceptible to Cross-Site Scripting.
TYPO3-EXT-SA-2022-001: Server-side request forgery in extension "Kitodo.Presentation" (dlf)
It has been discovered that the extension "Kitodo.Presentation" (dlf) is susceptible to Server-side request forgery.
TYPO3 11.5.6 and 10.4.24 maintenance releases published
The versions 11.5.6 and 10.4.24 of the TYPO3 Enterprise Content Management System have just been released.
TYPO3 Documentation Team Report 2021
The TYPO3 documentation tools are constantly improved by the TYPO3 Documentation Team to support you, the reader, in getting comprehensive information and quickly finding answers to your questions, and to help you, the author, in creating documentation and to increase the visibility and popularity of your extension in the TYPO3 world.
New System Requirements for Upcoming TYPO3 v12
TYPO3 v12 LTS will be released in April 2023. With every major TYPO3 version, we increase the minimum requirements to evolve with the ecosystem running TYPO3.
TYPO3 11.5.5 and 10.4.23 maintenance releases published
The versions 11.5.5 and 10.4.23 of the TYPO3 Enterprise Content Management System have just been released.
December 2021: Developer Appreciation Day (DAD)
Each month, we take the opportunity to celebrate contributors in our Developer Appreciation Day post. Please take a moment to share gratitude for their continued passion, commitment, and time they give to making TYPO3 CMS awesome.