TYPO3 News

Component Type: TYPO3 CMSSubcomponent: User Profile Settings (ext:backend)Release Date: April 21, 2026Vulnerability Type: Sensitive Data ExposureAffected Versions: 14.2.0Severity: HighSuggested CVSS:…

Release Date: March 17, 2026Updated: March 22, 2026Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.Component: "E-Mail MFA Provider"…

Release Date: March 17, 2026Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.Component: "Redirect Tab" (redirect_tab)Composer Package Name:…

Release Date: March 17, 2026Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.Component: "Mailqueue" (mailqueue)Composer Package Name:…

Release Date: January 20, 2026Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.Component: "Amazon AWS SDK" (aws)Composer Package Name: Not…

Release Date: January 20, 2026Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.Component: "Amazon Web Services (AWS) Toolbox" (aws_tools)Composer…

Release Date: January 20, 2026Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.Component: "AWS SDK for PHP" (aws_sdk_php)Composer Package Name: Not…

Release Date: January 20, 2026Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.Component: "Mailqueue" (mailqueue)Composer Package Name:…

Component Type: TYPO3 CMSSubcomponent: Mailer (ext:core)Release Date: January 13, 2026Vulnerability Type: Insecure DeserializationAffected Versions: 10.0.0-10.4.54, 11.0.0-11.5.48, 12.0.0-12.4.40,…

Component Type: TYPO3 CMSSubcomponent: Recycler (ext:recycler)Release Date: January 13, 2026Vulnerability Type: Broken Access ControlAffected Versions: 10.0.0-10.4.54, 11.0.0-11.5.48, 12.0.0-12.4.40,…