Security advisories, releases and news from the TYPO3 ecosystem
In focus
- Extension
- Extension
AI Bridge 1.26.2 (wn_ai_bridge)
- Extension
AI Bridge 1.26.1 (wn_ai_bridge)
- Extension
TCA API 1.0.0 (tca_api)
- Extension
AI Tools 2.3.0 (ai_tools)
- Forum
Vulnerabilities in multiple third party TYPO3 CMS extensions
AI summary
Multiple vulnerabilities have been identified in the third-party TYPO3 extensions "HTML5 Video Player vs. Powermail" and "SYSSY - TYPO3 Monitoring."
- Extension
Apache Solr for TYPO3 - Enterprise Search 13.1.4 (solr)
- Extension
AI Mate 0.4.0 (typo3_ai_mate)
- Extension
AI Label 1.1.1 (ai_label)
- SecuritySeverity unknown
TYPO3-EXT-SA-2026-027: SQL Injection in extension "Forms Export" (frp_form_answers)
- SecuritySeverity unknown
TYPO3-EXT-SA-2026-026: Broken Access Control in extension "Events 2" (events2)
- SecuritySeverity unknown
TYPO3-EXT-SA-2026-025: Multiple Vulnerabilities in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
- SecuritySeverity unknown
TYPO3-EXT-SA-2026-024: Multiple vulnerabilities in extension "femanager" (femanager)
- SecuritySeverity unknown
TYPO3-EXT-SA-2026-023: Multiple vulnerabilities in extension "Event management and registration" (sf_event_mgt)
- SecuritySeverity unknown
TYPO3-EXT-SA-2026-022: Server-Side Template Injection (SSTI) in extension "powermail" (powermail)
- SecuritySeverity unknown
TYPO3-EXT-SA-2026-021: Broken Access Control in extension "Forum" (pforum)
- SecuritySeverity unknown
TYPO3-EXT-SA-2026-020: Broken Access Control in extension "Industry Directory" (yellowpages2)
- SecuritySeverity unknown
TYPO3-EXT-SA-2026-019: Broken Access Control in extension "Club Directory" (clubdirectory)
- SecuritySeverity unknown
TYPO3-EXT-SA-2026-018: Broken Access Control in extension "Telephone Directory" (telephonedirectory)
- SecuritySeverity unknown
TYPO3-EXT-SA-2026-017: Path Traversal in extension "Mask" (mask)
- SecuritySeverity unknown
TYPO3-EXT-SA-2026-016: Information Disclosure in extension "Modules" (modules)
- SecuritySeverity unknown
TYPO3-EXT-SA-2026-015: Multiple Vulnerabilities in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)
- SecuritySeverity unknown
TYPO3-EXT-SA-2026-014: Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)
- Extension
FullCalendar.io for ext:Calendarize 6.0.0 (md_fullcalendar)
- Extension
Events 2 10.2.12 (events2)
- Extension
Forum 6.2.4 (pforum)
- Extension
Forms Export 7.1.1 (frp_form_answers)
- Extension
sluggi - URL Slug Management 14.15.0 (sluggi)
- Extension
Event management and registration 9.0.3 (sf_event_mgt)
- Extension
femanager 13.3.5 (femanager)