1802 matches found
TYPO3-EXT-SA-2026-029: SQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-029...
TYPO3-EXT-SA-2026-029: Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-029...
TYPO3-EXT-SA-2026-029: Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-029...
TYPO3-EXT-SA-2026-035: Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns_t3ai)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-035...
TYPO3-EXT-SA-2026-035: Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-035...
TYPO3-EXT-SA-2026-031: Broken Access Control in extension "Analytics" (analytics)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-031...
TYPO3-EXT-SA-2026-031: Insecure Direct Object Reference in extension "Analytics" (analytics)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-031...
TYPO3-EXT-SA-2026-032: Server-Side Request Forgery in extension "Kitodo.Presentation" (dlf)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-032...
TYPO3-EXT-SA-2026-028: Broken Access Control in extension "FAL Protect" (fal_protect)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-028...
TYPO3-EXT-SA-2026-034: SQL Injection in extension "File manager" (ameos_filemanager)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-034...
TYPO3-EXT-SA-2026-030: Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-030...
TYPO3-EXT-SA-2026-033: Cross-Site Scripting in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-033...
TYPO3-EXT-SA-2026-036: Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-036...
TYPO3-EXT-SA-2026-036: Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-036...
TYPO3-EXT-SA-2026-033: Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-033...
Signature validation bypass
More info at https://github.com/litesaml/lightsaml/security/advisories/GHSA-rm7m-7jq4-gw46...
TYPO3-CORE-SA-2026-024: Security Misconfiguration in Form Framework
More info at https://news.typo3.com/security/advisory/typo3-core-sa-2026-024...
Credentials under prefixed or nested names stored in cleartext in the threat log
More info at https://github.com/jay123anta/laravel-threat-detection/security/advisories/GHSA-6gg9-q48h-56vx...
Attacks go unrecorded when a request carries malformed headers or oversized fields
More info at https://github.com/jay123anta/laravel-threat-detection/security/advisories/GHSA-3c4c-m8xj-3vc8...
Marking a detection as a false positive could create a wider exclusion rule than intended
More info at https://github.com/jay123anta/laravel-threat-detection/security/advisories/GHSA-rppj-hxxm-v5pr...
A malformed HTTP chunked body can lead to a denial-of-service and peg the CPU
Summary A malformed HTTP message using Transfer-Encoding: chunked can drive React\Http\Io\ChunkedDecoder into an infinite loop, pegging a CPU core and freezing the event loop. Because ReactPHP is single-threaded, one such message stalls the entire process for every client until it is killed. Both...
Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS in react/http
Summary React\Http\Browser and its lower-level HTTP stack impose no limit on the size of a response's header section while it is being received. ClientRequestStream::handleData appends every incoming byte to an internal buffer and only scans that buffer for the \r\n\r\n or \n\n terminator, withou...
TYPO3-CORE-SA-2026-023: Missing Authorization in lowlevel commands
More info at https://news.typo3.com/security/advisory/typo3-core-sa-2026-023...
TYPO3-CORE-SA-2026-022: Information Disclosure via Backend Localization Wizard
More info at https://news.typo3.com/security/advisory/typo3-core-sa-2026-022...
Plaintext credentials written to the threat log and readable by any authenticated user
More info at https://github.com/jay123anta/laravel-threat-detection/security/advisories/GHSA-9jh8-pj82-6ccg...
TYPO3-EXT-SA-2026-025: Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-025...
TYPO3-EXT-SA-2026-025: Insecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-025...
TYPO3-EXT-SA-2026-025: Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-025...
TYPO3-EXT-SA-2026-027: SQL Injection in extension "Forms Export" (frp_form_answers)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-027...
TYPO3-EXT-SA-2026-015: Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-015...
TYPO3-EXT-SA-2026-015: Cleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-015...
TYPO3-EXT-SA-2026-018: Broken Access Control in extension "Telephone Directory" (telephonedirectory)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-018...
TYPO3-EXT-SA-2026-020: Broken Access Control in extension "Industry Directory" (yellowpages2)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-020...
TYPO3-EXT-SA-2026-017: Path Traversal in extension "Mask" (mask)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-017...
TYPO3-EXT-SA-2026-024: Broken Access Control in extension "femanager" (femanager)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-024...
TYPO3-EXT-SA-2026-026: Broken Access Control in extension "Events 2" (events2)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-026...
TYPO3-EXT-SA-2026-021: Broken Access Control in extension "Forum" (pforum)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-021...
TYPO3-EXT-SA-2026-019: Broken Access Control in extension "Club Directory" (clubdirectory)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-019...
TYPO3-EXT-SA-2026-024: Broken Access Control in extension "femanager" (femanager)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-024...
TYPO3-EXT-SA-2026-022: Server-Side Template Injection in extension "powermail" (powermail)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-022...
TYPO3-EXT-SA-2026-026: Broken Access Control in extension "Events 2" (events2)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-026...
TYPO3-EXT-SA-2026-024: Information Disclosure in extension "femanager" (femanager)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-024...
TYPO3-EXT-SA-2026-024: Broken Access Control in extension "femanager" (femanager)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-024...
TYPO3-EXT-SA-2026-016: Information Disclosure in extension "Modules" (modules)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-016...
TYPO3-EXT-SA-2026-025: Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-025...
TYPO3-EXT-SA-2026-025: Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-025...
TYPO3-EXT-SA-2026-023: Broken Access Control in extension "Event management and registration" (sf_event_mgt)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-023...
TYPO3-EXT-SA-2026-023: Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-023...