Save the Date(s) for the 2024 DevDays and TYPO3 Conference
Mark your calendars! The Developer Days are set to take place from 1st to the 3rd August 2024 in Karlsruhe, Germany. The TYPO3 Conference 2024 will return from 26th to 28th November 2024 at the Areal Böhler in Düsseldorf, Germany.
Read moreTYPO3 v13 Roadmap Announcement
Today, we are revealing the overall goals and planned release dates of the upcoming TYPO3 v13 release series. The first sprint release is just around the corner and will be followed by four releases until the final LTS-version in October 2024. Read on to learn more about our audacious plans.
TYPO3-EXT-SA-2023-011: Configuration Injection in extension "Direct Mail" (direct_mail)
It has been discovered that the extension "Direct Mail" (direct_mail) is susceptible to Configuration Injection.
TYPO3-EXT-SA-2023-010: Broken Access Control in extension "femanager" (femanager)
It has been discovered that the extension "femanager" (femanager) is susceptible to Broken Access Control.
TYPO3-EXT-SA-2023-009: Insecure Direct Object Reference in extension "Content Consent" (content_consent)
It has been discovered that the extension "Content Consent" (content_consent) is susceptible to Insecure Direct Object Reference.
TYPO3 12.4.9 maintenance release published
The version 12.4.9 of the TYPO3 Enterprise Content Management System has just been released.
A Recap of the First Remote Code Sprint With the Best Practices Team
The focus of the Best Practices Team’s first code sprint was to work on open issues for the Tea extension. For me, it was the first official TYPO3 code sprint that I have ever attended — and it will not be my last.
Shutdown of the Pootle Translation Server
Crowdin has been our default translation server for quite some time. We have now decommissioned the infrastructure that supported the old Pootle translation server — here is how it impacts you.
Automatic TYPO3 Updates Across Several Major Versions With DDEV
With this small tool, automated TYPO3 updates over several versions are no problem. Developers can use this tool to master even complex TYPO3 updates without a weeks-long freeze for the customer. The only requirements: A local DDEV installation and Git.
TYPO3-CORE-SA-2023-007: By-passing Cross-Site Scripting Protection in HTML Sanitizer
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.