TYPO3 News & Events Hub
What’s new & what’s comin’
TYPO3-CORE-SA-2019-026: Insecure Deserialization in Query Generator & Query View
It has been discovered that TYPO3 CMS is vulnerable to insecure deserialization.
Read moreTYPO3-CORE-SA-2019-025: SQL Injection in low-level Query Generator
It has been discovered that TYPO3 CMS is vulnerable to SQL injection.
TYPO3-CORE-SA-2019-024: Directory Traversal on ZIP extraction
It has been discovered that TYPO3 CMS is vulnerable to directory traversal.
TYPO3-CORE-SA-2019-023: Cross-Site Scripting in Filelist Module
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2019-022: Cross-Site Scripting in Link Handling
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting in Link Handling.
TYPO3-CORE-SA-2019-021: Cross-Site Scripting in Form Framework validation handling
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-PSA-2019-011: Possible Insecure Deserialization in Extbase Request Handling
It has been discovered that TYPO3 CMS can be vulnerable to insecure deserialization.
TYPO3-PSA-2019-010: Cross-Site Scripting Vulnerabilities in File Upload Handling
It has been discovered that TYPO3 is susceptible to cross-site scripting.
Keep Your TYPO3 v7.6 Site Safe With ELTS
Software delivers the most value when fully updated and supported - your enterprise’s CMS is no exception. Keep your TYPO3 v7.6 website safe and increase your return on investment (ROI) by opting for our Extended Long Term Support (ELTS).
November 2019: Developer Appreciation Day (DAD)
On this Developer Appreciation Day (DAD), we’d like to appreciate all the hard working developers once more who continuously contribute to the TYPO3 Project: Thank you ever so much, folks! Find November's most important names and some really impressive numbers in our recent post.