It has been discovered that the extension "Content Element Selector" (ceselector) is vulnerable to Remote Code Execution.

It has been discovered that the extension "Address List" (tt_address) is vulnerable to SQL Injection.

It has been discovered that the extension "Faceted Search" (ke_search) is vulnerable to XML External Entity injection, Path Traversal and Information…

It has been discovered that the extension "News system" (news) is vulnerable to SQL Injection.

It has been discovered that the extension "Frontend User Registration" (sf_register) is vulnerable to Broken Access Control.

It has been discovered that the extension "Site Crawler" (crawler) is vulnerable to Remote Code Execution.

It has been discovered that TYPO3 CMS is susceptible to sensitive data exposure.

It has been discovered that TYPO3 CMS is susceptible to sensitive data exposure.

Since none of the remaining candidates achieved 50% of the votes in the second round, members are asked to vote in a final round. If the necessary…

The call for community budget ideas for the second round of 2026 was successful: Seven Community and three Team ideas have made it to the poll. These…

March went out with a bang. TYPO3 v14.2 shipped on the final day of the month, the Association elections saw an 18% surge in voter participation, and…

Simon Praetorius gives us an update on his Community Budget idea for improving the Fluid developer experience — and the first results are already…

See the full recap of TYPO3's March core contributions with 66 contributors, 255 reviews, bug fixes, features, and a big thank-you to our developers.

Today we proudly released TYPO3 version 14.2—and you won't be disappointed! You'll find new features, improvements, and optimizations in every corner…

When the election closed, more than 380 members had cast their votes. This is an 18% increase from 2025. Another voting round will take place to…

Learn how to check if your TYPO3 version is outdated and choose the best way to upgrade your TYPO3 website.

A look at how the TYPO3 community has tackled backend accessibility over the years — and what a dedicated sprint in 2025 revealed about how far it's…

Prepare for the end of TYPO3 v12 LTS free support on 30 April 2026. Consider extending your current system's life with ELTS for critical security…

Join the TYPO3 community in marking the release of TYPO3 v14 LTS. The official release day is 21 April 2026, and we’re excited to highlight release…

Last weekend at Web Camp Venlo, developer Matthias Vogel demonstrated how the default Camino theme supports visual editing in TYPO3 v14. I believe…

It has been discovered that the extension "E-Mail MFA Provider" (mfa_email) is vulnerable to Authentication Bypass.

It has been discovered that the extension "E-Mail MFA Provider" (mfa_email) is vulnerable to Authentication Bypass.

It has been discovered that the extension "Redirect Tab" (redirect_tab) is vulnerable to Broken Access Control.

It has been discovered that the extension "Redirect Tab" (redirect_tab) is vulnerable to Broken Access Control.

It has been discovered that the extension "Mailqueue" (mailqueue) is vulnerable to insecure deserialization.

It has been discovered that the extension "Mailqueue" (mailqueue) is vulnerable to insecure deserialization.

February kept the momentum going. Two maintenance releases kept production stable, the Board dropped an activity report, and nominations opened for…

With the new year just around the corner, I attended a Remote Code Sprint of the Best Practices Team for the very first time ever.

Help us shape the official TYPO3 v14 LTS narrative! Join the hybrid Marketing Sprint in Berlin on April 13-14, 2026. Secure your spot and register…

The versions 13.4.27 and 12.4.44 of the TYPO3 Enterprise Content Management System have just been released.