TYPO3-CORE-SA-2026-004: Insecure Deserialization via Mailer File Spool
It has been discovered that TYPO3 CMS is vulnerable to insecure deserialization.
Read moreTYPO3-CORE-SA-2026-003: Broken Access Control in Recycler Module
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3-CORE-SA-2026-002: Broken Access Control in Redirects Module
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3-CORE-SA-2026-001: Broken Access Control in Edit Document Controller
It has been discovered that TYPO3 CMS is susceptible to broken access control.
Report from the TYPO3 Code Sprint in Geneva
27–31 October, TYPO3 contributors got together in Geneva, Switzerland, for a TYPO3 Code Sprint. It wasn’t just the Core Team — anyone interested in improving TYPO3 was welcome to join and this time, I had the pleasure of joining for the very first time.
TYPO3 13.4.20 and 12.4.39 maintenance releases published
The versions 13.4.20 and 12.4.39 of the TYPO3 Enterprise Content Management System have just been released.
T3CON Celebrates 20 Years with ERGO by Lüftner and Parili as Patron Sponsor
We’re pleased to announce ERGO by Lüftner and Parili as Patron Sponsor for the TYPO3 Conference 2025 (25-27 November 2025).
TYPO3 13.4.19 and 12.4.38 maintenance releases published
The versions 13.4.19 and 12.4.38 of the TYPO3 Enterprise Content Management System have just been released.
TYPO3-CORE-SA-2025-023: Information Disclosure via CSV Download
It has been discovered that TYPO3 CMS is susceptible to information disclosure.
TYPO3-CORE-SA-2025-022: Information Disclosure in Workspaces Module
It has been discovered that TYPO3 CMS is susceptible to information disclosure.