TYPO3-CORE-SA-2026-004: Insecure Deserialization via Mailer File Spool
It has been discovered that TYPO3 CMS is vulnerable to insecure deserialization.
TYPO3-CORE-SA-2026-003: Broken Access Control in Recycler Module
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3-CORE-SA-2026-003: Broken Access Control in Recycler Module
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3-CORE-SA-2026-002: Broken Access Control in Redirects Module
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3-CORE-SA-2026-001: Broken Access Control in Edit Document Controller
It has been discovered that TYPO3 CMS is susceptible to broken access control.
Recognizing Open-Source Work as Volunteering in Germany
TYPO3 Association Board member Boris Hinzer outlines a new petition advocating for legal recognition of open-source work as volunteer service.
Coder's Corner: December 2025
See the full recap of TYPO3’s November core contributions with 47 contributors, 148 reviews, bug fixes, features, and a big thank-you to our…
Vote Now! Budget Ideas for Round 1/2026 Have Been Published
The call for community budget ideas for the first round of 2026 was successful: Six community and three team ideas have made it to the poll. These…
This Month in TYPO3: December 2025
December closed out 2025 with solid releases and active community work. From security updates and tooling progress to conference highlights and…
TYPO3-EXT-SA-2025-016: Vulnerability in bundled package in extension "Single Sign-on with SAML" (md_saml)
It has been discovered that the extension "Single Sign-on with SAML" (md_saml) bundles a vulnerable version of “onelogin/php-saml“ which is…