Posts by tag: Development en https://news.typo3.com/article/tag/development/blog.tag.xml Sat, 18 Jul 2026 14:43:24 +0200 https://news.typo3.com/article/typo3-joins-the-php-foundation-as-a-silver-sponsorhttps://news.typo3.com/article/typo3-joins-the-php-foundation-as-a-silver-sponsor#commentsTue, 30 Jun 2026 08:00:00 +0200Luana Valentinihttps://news.typo3.com/article/typo3-joins-the-php-foundation-as-a-silver-sponsorIn June 2026, TYPO3 joined the PHP Foundation as a Silver Sponsor, supporting the long-term development of the language its CMS and ecosystem have relied on for more than two decades. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-013https://news.typo3.com/security/advisory/typo3-ext-sa-2026-013#commentsTue, 19 May 2026 11:06:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-013It has been discovered that the extension "Content Element Selector" (ceselector) is vulnerable to Remote Code Execution. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-012https://news.typo3.com/security/advisory/typo3-ext-sa-2026-012#commentsTue, 19 May 2026 11:05:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-012It has been discovered that the extension "Address List" (tt_address) is vulnerable to SQL Injection. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-011https://news.typo3.com/security/advisory/typo3-ext-sa-2026-011#commentsTue, 19 May 2026 11:03:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-011It has been discovered that the extension "Faceted Search" (ke_search) is vulnerable to XML External Entity injection, Path Traversal and Information Disclosure. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-010https://news.typo3.com/security/advisory/typo3-ext-sa-2026-010#commentsTue, 19 May 2026 11:02:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-010It has been discovered that the extension "News system" (news) is vulnerable to SQL Injection. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-009https://news.typo3.com/security/advisory/typo3-ext-sa-2026-009#commentsTue, 19 May 2026 11:01:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-009It has been discovered that the extension "Frontend User Registration" (sf_register) is vulnerable to Broken Access Control. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-008https://news.typo3.com/security/advisory/typo3-ext-sa-2026-008#commentsTue, 19 May 2026 11:00:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-008It has been discovered that the extension "Site Crawler" (crawler) is vulnerable to Remote Code Execution. https://news.typo3.com/security/advisory/typo3-core-sa-2026-005https://news.typo3.com/security/advisory/typo3-core-sa-2026-005#commentsTue, 21 Apr 2026 11:05:00 +0200Oliver Haderhttps://news.typo3.com/security/advisory/typo3-core-sa-2026-005It has been discovered that TYPO3 CMS is susceptible to sensitive data exposure. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-007https://news.typo3.com/security/advisory/typo3-ext-sa-2026-007#commentsTue, 17 Mar 2026 10:02:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-007It has been discovered that the extension "E-Mail MFA Provider" (mfa_email) is vulnerable to Authentication Bypass. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-006https://news.typo3.com/security/advisory/typo3-ext-sa-2026-006#commentsTue, 17 Mar 2026 10:01:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-006It has been discovered that the extension "Redirect Tab" (redirect_tab) is vulnerable to Broken Access Control. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-005https://news.typo3.com/security/advisory/typo3-ext-sa-2026-005#commentsTue, 17 Mar 2026 10:00:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-005It has been discovered that the extension "Mailqueue" (mailqueue) is vulnerable to insecure deserialization. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-004https://news.typo3.com/security/advisory/typo3-ext-sa-2026-004#commentsTue, 20 Jan 2026 08:33:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-004It has been discovered that the extension "Amazon AWS SDK" (aws) bundles a vulnerable version of “aws/aws-sdk-php“ which is susceptible to use of a Broken or Risky Cryptographic Algorithm. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-003https://news.typo3.com/security/advisory/typo3-ext-sa-2026-003#commentsTue, 20 Jan 2026 08:32:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-003It has been discovered that the extension "Amazon Web Services (AWS) Toolbox" (aws_tools) bundles a vulnerable version of “aws/aws-sdk-php“ which is susceptible to use of a Broken or Risky Cryptographic Algorithm. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-002https://news.typo3.com/security/advisory/typo3-ext-sa-2026-002#commentsTue, 20 Jan 2026 08:31:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-002It has been discovered that the extension "AWS SDK for PHP" (aws_sdk_php) bundles a vulnerable version of “aws/aws-sdk-php“ which is susceptible to use of a Broken or Risky Cryptographic Algorithm. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-001https://news.typo3.com/security/advisory/typo3-ext-sa-2026-001#commentsTue, 20 Jan 2026 08:30:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-001It has been discovered that the extension "Mailqueue" (mailqueue) is vulnerable to insecure deserialization. https://news.typo3.com/security/advisory/typo3-core-sa-2026-004https://news.typo3.com/security/advisory/typo3-core-sa-2026-004#commentsTue, 13 Jan 2026 12:04:00 +0100Oliver Haderhttps://news.typo3.com/security/advisory/typo3-core-sa-2026-004It has been discovered that TYPO3 CMS is vulnerable to insecure deserialization. https://news.typo3.com/security/advisory/typo3-core-sa-2026-003https://news.typo3.com/security/advisory/typo3-core-sa-2026-003#commentsTue, 13 Jan 2026 12:03:00 +0100Oliver Haderhttps://news.typo3.com/security/advisory/typo3-core-sa-2026-003It has been discovered that TYPO3 CMS is susceptible to broken access control. https://news.typo3.com/security/advisory/typo3-core-sa-2026-002https://news.typo3.com/security/advisory/typo3-core-sa-2026-002#commentsTue, 13 Jan 2026 12:02:00 +0100Oliver Haderhttps://news.typo3.com/security/advisory/typo3-core-sa-2026-002It has been discovered that TYPO3 CMS is susceptible to broken access control. https://news.typo3.com/security/advisory/typo3-core-sa-2026-001https://news.typo3.com/security/advisory/typo3-core-sa-2026-001#commentsTue, 13 Jan 2026 12:01:00 +0100Oliver Haderhttps://news.typo3.com/security/advisory/typo3-core-sa-2026-001It has been discovered that TYPO3 CMS is susceptible to broken access control. https://news.typo3.com/security/advisory/typo3-ext-sa-2025-016https://news.typo3.com/security/advisory/typo3-ext-sa-2025-016#commentsWed, 17 Dec 2025 10:00:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2025-016It has been discovered that the extension "Single Sign-on with SAML" (md_saml) bundles a vulnerable version of “onelogin/php-saml“ which is susceptible to Authentication Bypass. https://news.typo3.com/article/report-from-the-typo3-code-sprint-in-genevahttps://news.typo3.com/article/report-from-the-typo3-code-sprint-in-geneva#commentsMon, 17 Nov 2025 11:06:28 +0100Michael Binderhttps://news.typo3.com/article/report-from-the-typo3-code-sprint-in-geneva27–31 October, TYPO3 contributors got together in Geneva, Switzerland, for a TYPO3 Code Sprint. It wasn’t just the Core Team — anyone interested in improving TYPO3 was welcome to join and this time, I had the pleasure of joining for the very first time. https://news.typo3.com/security/advisory/typo3-ext-sa-2025-015https://news.typo3.com/security/advisory/typo3-ext-sa-2025-015#commentsWed, 12 Nov 2025 11:31:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2025-015It has been discovered that the extension "Modules" (modules) is susceptible to Broken Authentication. https://news.typo3.com/security/advisory/typo3-ext-sa-2025-014https://news.typo3.com/security/advisory/typo3-ext-sa-2025-014#commentsWed, 12 Nov 2025 11:30:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2025-014It has been discovered that the extension "Forms Export" (frp_form_answers) bundles a vulnerable version of "phpoffice/phpspreadsheet", which is susceptible to Server-Side Request Forgery. https://news.typo3.com/article/typo3-13420-and-12439-maintenance-releases-publishedhttps://news.typo3.com/article/typo3-13420-and-12439-maintenance-releases-published#commentsTue, 11 Nov 2025 12:10:00 +0100Benni Mackhttps://news.typo3.com/article/typo3-13420-and-12439-maintenance-releases-publishedThe versions 13.4.20 and 12.4.39 of the TYPO3 Enterprise Content Management System have just been released. https://news.typo3.com/article/acl-enhancements-permission-sets-in-typo3https://news.typo3.com/article/acl-enhancements-permission-sets-in-typo3#commentsSun, 02 Nov 2025 21:54:25 +0100Łukasz Uznańskihttps://news.typo3.com/article/acl-enhancements-permission-sets-in-typo3In this article, Łukasz Uznański outlines the design, development journey (including UX experiments and pitfalls), and practical scenarios for applying permission sets in both new and existing TYPO3 projects. https://news.typo3.com/article/content-preview-the-journey-of-a-side-by-side-budget-ideahttps://news.typo3.com/article/content-preview-the-journey-of-a-side-by-side-budget-idea#commentsFri, 24 Oct 2025 13:25:59 +0200Łukasz Uznańskihttps://news.typo3.com/article/content-preview-the-journey-of-a-side-by-side-budget-ideaIn this report, Łukasz Uznański shares the story behind his community budget idea and presents the first results of the new Content Preview extension. https://news.typo3.com/article/community-budget-report-a-modern-rich-text-editor-rte-experience-with-tiptaphttps://news.typo3.com/article/community-budget-report-a-modern-rich-text-editor-rte-experience-with-tiptap#commentsFri, 17 Oct 2025 11:25:05 +0200Florian Langerhttps://news.typo3.com/article/community-budget-report-a-modern-rich-text-editor-rte-experience-with-tiptapIn this report, Florian Langer shares the story behind his community budget idea and presents the first results of the new TipTap rich-text editor integration. https://news.typo3.com/article/typo3-13419-and-12438-maintenance-releases-publishedhttps://news.typo3.com/article/typo3-13419-and-12438-maintenance-releases-published#commentsTue, 14 Oct 2025 13:00:00 +0200Benni Mackhttps://news.typo3.com/article/typo3-13419-and-12438-maintenance-releases-publishedThe versions 13.4.19 and 12.4.38 of the TYPO3 Enterprise Content Management System have just been released. https://news.typo3.com/article/vote-now-for-the-typo3-best-extension-award-2025https://news.typo3.com/article/vote-now-for-the-typo3-best-extension-award-2025#commentsSun, 12 Oct 2025 13:14:00 +0200Myrna Gönnemannhttps://news.typo3.com/article/vote-now-for-the-typo3-best-extension-award-2025TYPO3 has always been built on collaboration and the strength of open source. One of the greatest advantages of our ecosystem is the wide range of extensions that make TYPO3 as powerful and flexible as it is. These extensions are created and maintained by individuals and teams who dedicate their time and expertise to improving TYPO3 for everyone. https://news.typo3.com/security/advisory/typo3-ext-sa-2025-013https://news.typo3.com/security/advisory/typo3-ext-sa-2025-013#commentsTue, 16 Sep 2025 10:31:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2025-013It has been discovered that the extension "Base Excel" (base_excel) bundles a vulnerable version of “phpoffice/phpspreadsheet“ which is susceptible to Server-Side Request Forgery.