SecurityHigh
Security advisories, releases and news from the TYPO3 ecosystem
In focus
- SecurityHigh
TYPO3-CORE-SA-2026-007: Broken Access Control in File Abstraction Layer
- SecurityMedium
TYPO3-CORE-SA-2026-006: By-passing Cross-Site Scripting Protection in HTML Sanitizer
- Blog
Case Study SEEBURGER AG: Auch in China schnell
- Forum
TYPO3-Metriken mit Prometheus | SimpleCMP - Consent Manager | TYPO3 Meetup München am 8.6.2026 um 19 Uhr
AI summary
The next TYPO3 Meetup in Munich is scheduled for June 8, 2026, at 19:00, featuring topics such as TYPO3 metrics with Prometheus presented by Christian Spoo and the SimpleCMP consent manager for static sites.
- Video
TYPO3 Award Gala 2025 – A Night To Remember | T3CON25
AI summary
The TYPO3 Award Gala 2025 will take place during T3CON25, celebrating outstanding contributions to the TYPO3 community.
- Blog
Notes from Atlanta—What the First TYPO3 Summit North America Says About the Next Decade of Enterprise CMS
- Forum
How to access TYPO3 Request Object and frontend.page.information in PageTitleProvider?
- Video
Introducing the TYPO3 Certification Bundle – Booking your next TYPO3 exam
AI summary
TYPO3 has launched the Certification Bundle, which allows developers to book and manage their certification exams easily through an online platform.
- Blog
CMS Meetup Atlanta: Why Governance Is Quietly Becoming the Deciding Factor for Enterprise CMS
- SecurityCritical
TYPO3-EXT-SA-2026-013: Remote Code Execution in extension "Content Element Selector" (ceselector)
- SecurityHigh
TYPO3-EXT-SA-2026-012: SQL Injection in extension "Address List" (tt_address)
- SecurityMedium
TYPO3-EXT-SA-2026-011: Multiple vulnerabilities in extension "Faceted Search" (ke_search)
- SecurityHigh
TYPO3-EXT-SA-2026-010: SQL Injection in extension "News system" (news)
- SecurityMedium
TYPO3-EXT-SA-2026-009: Broken Access Control in extension "Frontend User Registration" (sf_register)
- SecurityHigh
TYPO3-EXT-SA-2026-008: Remote Code Execution in extension "Site Crawler" (crawler)
- Blog
How to Prevent UX Sprawl in Existing Digital Products
- Blog
Not Bad. But Have You Ever Been to the TYPO3 Camp in Baden-Württemberg?
- Forum
How to use a site setting of type bool in typoscript
AI summary
It is challenging to manage a boolean site setting in TypoScript, as the author failed to pass a "flag" variable that holds "1" or "0" despite several attempts and assistance from AI.
- Forum
[TYPO3-announce] TYPO3 14.3.1 and 13.4.29 maintenance releases
AI summary
TYPO3 14.3.1 LTS and 13.4.29 LTS maintenance releases have been released and are available for download.
- Video
Introducing TYPO3 v14.0
AI summary
The article presents a video introducing TYPO3 v14.0, covering its new features and improvements.
- Video
TYPO3 Conference 2025 Highlights
AI summary
The TYPO3 Conference 2025 will showcase various highlights, including keynotes, workshops, and networking opportunities for developers and community members.
- Forum
[SOLVED] Is v13 really incompatible with MariaDB 11.8?
AI summary
TYPO3 v13 is specified to require MariaDB versions between 10.4.3 and 10.99.99, leading to concerns about compatibility with the upcoming Debian 13 "trixie," which includes MariaDB 11.8 by default.
- Video
Introducing TYPO3 v14.2
AI summary
TYPO3 v14.2 has been released, featuring enhancements including better performance, updated UI components, and improvements to the accessibility of the backend.
- Forum
TYPO3 Stammtisch bei elementare teilchen am 21.5.2026 um 19 Uhr
AI summary
A TYPO3 Stammtisch will take place at elementare teilchen in Munich on May 21, 2026, at 7 PM, ten days after the next MTUG meeting.
- Video
TYPO3 Developer Days 2025 Recap
AI summary
The TYPO3 Developer Days 2025 featured presentations and discussions by community members on various technical topics related to TYPO3 development. The event included workshops and sessions aimed at enhancing developer skills and collaboration within the TYPO3 ecosystem.
- Forum
Visual Editing in TYPO3 | Vibecoding ohne Blutvergießen | TYPO3 Meetup München am 11.5.2026 um 19 Uhr
AI summary
The TYPO3 Meetup Munich on May 11, 2026, will feature discussions on "Visual Editing in TYPO3" and "Vibecoding without Bloodshed," focusing on frontend editing and security aspects.
- Video
A Day at TYPO3 Surfcamp | VLOG
AI summary
The article is a video vlog showcasing a day at the TYPO3 Surfcamp, highlighting various activities and experiences shared among participants related to TYPO3.
- Forum
[SOLVED] Emulate Site Settings module for non admin users
AI summary
A user seeks advice on how to allow non-admin users in TYPO3 14.3 to manage site settings effectively, requesting input on the best approach or techniques for simplification.
- Forum
tt_products does not send confirmation email to customer