TYPO3 News & Events Hub
What’s New & What’s Coming
Stay up to date with the latest TYPO3 news and announcements by subscribing to our RSS feed.
TYPO3-CORE-SA-2026-011: Broken Access Control in Recycler
It has been discovered that TYPO3 CMS is susceptible to broken access control.
Read moreTYPO3-CORE-SA-2026-010: Cross-Site Scripting in Indexed Search
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2026-009: Open Redirect in TYPO3 CMS
It has been discovered that TYPO3 CMS is susceptible to open redirect.
TYPO3-CORE-SA-2026-008: Broken Access Control in Form Framework
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3-CORE-SA-2026-007: Broken Access Control in File Abstraction Layer
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3-CORE-SA-2026-006: By-passing Cross-Site Scripting Protection in HTML Sanitizer
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
You're Invited: TYPO3 Dialogue Days — 13–14 July 2026 in Düsseldorf, Germany
The TYPO3 Association Board is pleased to invite TYPO3 Association members to the TYPO3 Dialogue Days: a two-day strategic gathering taking place on 13–14 July 2026 at the TYPO3 Company office in Düsseldorf.
Extbase Documentation Overhaul: Status Report #1
The Extbase documentation is being improved. Anja Leichsenring shares an update on this ongoing work.
This Month in TYPO3: May 2026
May was a month of foundations — built, documented, and defended. Six extension security advisories landed in a single week, two maintenance releases kept v14 and v13 current, and a new Compliance Officer mandate gave the Association a clearer governance spine.
TYPO3 Contribution in Numbers: May 2026
See the full recap of TYPO3's May core contributions with 46 contributors, 124 reviews, bug fixes, features, and a big thank-you to our community.