TYPO3-CORE-SA-2026-003: Broken Access Control in Recycler Module
It has been discovered that TYPO3 CMS is susceptible to broken access control.
Read moreTYPO3-CORE-SA-2026-002: Broken Access Control in Redirects Module
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3-CORE-SA-2026-001: Broken Access Control in Edit Document Controller
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3-EXT-SA-2025-016: Vulnerability in bundled package in extension "Single Sign-on with SAML" (md_saml)
It has been discovered that the extension "Single Sign-on with SAML" (md_saml) bundles a vulnerable version of “onelogin/php-saml“ which is susceptible to Authentication Bypass.
Report from the TYPO3 Code Sprint in Geneva
27–31 October, TYPO3 contributors got together in Geneva, Switzerland, for a TYPO3 Code Sprint. It wasn’t just the Core Team — anyone interested in improving TYPO3 was welcome to join and this time, I had the pleasure of joining for the very first time.
TYPO3-EXT-SA-2025-015: Broken Authentication in extension "Modules" (modules)
It has been discovered that the extension "Modules" (modules) is susceptible to Broken Authentication.
TYPO3-EXT-SA-2025-014: Vulnerability in bundled package in extension "Forms Export" (frp_form_answers)
It has been discovered that the extension "Forms Export" (frp_form_answers) bundles a vulnerable version of "phpoffice/phpspreadsheet", which is susceptible to Server-Side Request Forgery.
TYPO3 13.4.20 and 12.4.39 maintenance releases published
The versions 13.4.20 and 12.4.39 of the TYPO3 Enterprise Content Management System have just been released.
ACL Enhancements — Permission Sets in TYPO3
In this article, Łukasz Uznański outlines the design, development journey (including UX experiments and pitfalls), and practical scenarios for applying permission sets in both new and existing TYPO3 projects.
Content Preview: The Journey of a Side-By-Side Budget Idea
In this report, Łukasz Uznański shares the story behind his community budget idea and presents the first results of the new Content Preview extension.