This Month in TYPO3: August, 2026

Meanwhile a fourteen-advisory security day and a production-ready Visual Editor kept the technical side busy. Camp season starts in September.

• TYPO3 14.3.6 and 13.4.34 shipped on 11 August as security releases for the v14 and v13 branches. If you run either line in production, this is the update to schedule first — both branches were published together.
• TYPO3-CORE-SA-2026-021 covers broken access control in the Backend and Install Tool. It was the month's only core advisory, published alongside the 11 August releases.
• Extension advisories arrived in one batch on 25 August — 2026-014, 015, 016, 017, 018, 019, 020, 021, 022, 023, 024, 025, 026, and 027 — covering powermail, femanager, Apache Solr for TYPO3, Mask, Events 2, Event Management and Registration, and more.
• No maintenance-only or ELTS releases were published in August; the last ELTS batch shipped in July.

August's contribution roundup records 80 contributors and 148 reviews across bug fixes and features — a noticeable step up from July's 61. That is a lot of people spending their August on someone else's upgrade path.

• Proposed Rules for TYPO3 Units and a Unit Cooperation Panel went out for community review on 6 August, with FAQs alongside them. Feedback and questions are open until 6 September, so this one is still live.
• A new independent support contact for Code of Conduct incidents starts 1 September. From that date, community members can choose between the Ombudsperson Committee and a confidential external service from Inmedio.
• Notes from the mediation Q&A cover the 26 August webinar on how the external service will actually work in practice. If you missed the live session, the full video recording is now available alongside the written answers.
• Round Three budget ideas went to a vote on 5 August: four community ideas and two team ideas made it to the poll. Association members can discuss the proposals and cast their ballots.
• The 19 August board protocol covers governance and compliance work, including the Conflict of Interest Policy and early preparation for the Cyber Resilience Act, plus new community structures and possible partnerships.
• The 6 August board protocol reviewed the conflict-of-interest decision paper, a proposed TYPO3 Enterprise Committee, and the working group formed to draft the by-law changes agreed at the General Assembly.
• The 22 July board protocol, published 14 August, adds context on the Enterprise Committee proposal, Governance Working Group and compliance officer updates, membership exclusions, and trademark violations.

• 8 September 2026 — Unternehmen im Fluss, Cologne, Germany
• 9 September 2026 — Into Design Systems, Fornebu, Norway
• 11 September 2026 — LUX User eXperience Day, Puchheim, Germany
• 11–13 September 2026 — TYPO3 Camp München, Munich, Germany
• 15 September 2026 — SUSE TechTalk Oslo, Oslo, Norway
• 15–16 September 2026 — TYPO3 University Days 2026, Erfurt, Germany
• 22–23 September 2026 — Open Source Congress, Halifax, Nova Scotia, Canada
• 23–24 September 2026 — DMEXCO, Cologne, Germany
• 23–25 September 2026 — WeAreDevelopers World Congress North America, San Jose, CA, USA
• 1 October 2026 — RYZE Experience Conference 2026, Mainz, Germany

Fourteen extension advisories in one day is a good prompt to check what is actually installed on your sites. Version history, maintenance status, and current compatibility for every public extension are listed in the TYPO3 Extension Repository — worth a pass through your composer.json this week.

• The Content Blocks GUI now runs on v13 and v14 from one codebase, according to the Content Types Team's Q2 report. The JSON Schema also picked up a round of improvements, and the team joined the Dialogue Days in Düsseldorf.
• Visual Editor is production-ready following its Community Budget project, with work focused on accessibility, reliability, and multilingual editorial workflows. The path toward Core inclusion stays open.
• A practical GEO guide for TYPO3 walks through chunking, structured data, and multilingual setup so your content stands a chance of being cited in AI-generated answers. Written for content people, not just developers.
• Jana Höffner on digital sovereignty argues that the Association, the Company, and the community need to treat sector-wide change as an opportunity rather than a threat. A direct opinion piece from the Vice President.
• Olivier Dobberkau's notes from CMS Connect 26 in Montreal reflect on what shifts and what holds steady in the CMS industry, drawn from the 4–5 August conference run by Janus Boye.
• Native features versus plugin sprawl was the theme of this North American Summit recap: multilingual support, workflows, permissions, and governance built in rather than bolted on, and what that means for long-term scalability.
• How to choose a TYPO3 agency is a useful piece to forward to prospective clients — how to evaluate partners, what factors actually matter, and which official resources help narrow the field.
• TYPO3 University Days return to Erfurt, Germany, on 15–16 September, bringing the university sector together with agencies. Sessions are held in German, and a certification exam is available on site.

Ran an extension audit after the 25 August advisories and learned something worth passing on? Spoke at a camp, mentored a first-time contributor, or finished a v14 upgrade you thought would go badly? Tell us what you worked on and we will feature it.

Thank you to the Security Team, who coordinated fourteen extension advisories and a core release in the same fortnight, to everyone drafting and reviewing governance proposals through the summer, to the Content Types and Visual Editor contributors shipping funded work, and to the eighty people who showed up in the core repositories in August.