This Month in TYPO3: May 2025 [Issue #25]

May delivered a security sprint — four core releases and two ELTS waves — alongside budget-funded playground tooling, Q3 idea voting, and a calendar packed with conferences, camps, and global open-source weeks. TYPO3’s community continues to turn collaboration into momentum.

Security and Maintenance Releases

TYPO3 13.4.10 & 12.4.29
Early-May maintenance updates tidied edge-case bugs and refined composer-based deployments for long-term projects. Release notes

TYPO3 13.4.11 & 12.4.30
Both versions fix regressions introduced with TYPO3 v12.4.29 LTS and TYPO3 v13.4.10 LTS, related to open_basedir, Composer Mode and Path Resolving. Full details

TYPO3 13.4.12 & 12.4.31 (Security)
Critical fixes close MFA-bypass and file-upload vectors — upgrade quickly for maximum protection. Read advisory

TYPO3 13.4.13 & 12.4.32
All versions are security releases and contain important security fixes. Read the corresponding security advisories. Learn more

ELTS 9.5.51 / 10.4.50 / 11.5.44 & ELTS 9.5.52 / 10.4.51 / 11.5.45
Multiple TYPO3 ELTS versions were released. As always with our ELTS maintenance releases, the primary focus is to keep the instance stable and the backend running smoothly, regardless of current browsers changing their behaviour over time. Read more and read more

Multiple Vulnerabilities in Extensions
The TYPO3 Security Team is always working hard to not only address security issues in TYPO3 core, but also popular third-party TYPO3 extensions from TER, too. TYPO3 Security Bulletins

Insights From the TYPO3 Association and TYPO3 Company

• Trademark-Usage Guidelines — A must-read primer on domains, social handles, and ads ensures everyone protects the TYPO3 name responsibly. Read policy
   
• Digital Public Good Status — TYPO3 joins the global DPG registry, underscoring its commitment to open-source values and sustainable development goals. Press release
   
• Backing an EU Sovereign Tech Fund — The Association urges Brussels to invest strategically in open-source security and digital resilience. Letter of support
   
• One-Click TYPO3 Playground — A budget-idea report shows promising progress toward spin-up-and-learn demo instances for newcomers. See progress
   
• Vote on Q3/2025 Budget Ideas — Community members can now rank proposals that will receive funding next quarter — make your voice count. More info

Upcoming TYPO3 Events

• 5 June — WordCamp Europe
  Cross-CMS mingling, workshops, and open-source collaboration. TYPO3 ambassador will be on-site. Join the action
   
• 6 June — AltCtrlOrg
  Hear voices and ideas that might not typically fit into WordCamp schedules during this WordCamp Europe side event. Join the waiting list
   
• 13 June — Head in the Cloud
  Discover insights into the topics of Cloud & DevOps, Technology and Culture & Creativity and enjoy a day with Mittwald in Espelkamp, Germany. Register free
   
• 16 June — UN Open-Source Week
  A week-long gathering on open source, digital public infrastructure (DPI), and the development of innovative solutions to global challenges. More info
   
• 19 June — Neos Conference
  Sister CMS communities exchange ideas at a two-track conference for developers, technical leads, CTOs, and everyone willing to learn something new and wants to challenge the status quo! Attend hybrid
   
• 23 June — TYPO3 Community Sprint (Q2)
  Developers, editors, and docs writers converge to this code sprint for all TYPO3 community teams, initiatives, and those invited by them. Newcomers welcome. Sign up
   
• 26 June — TYPO3 Camp Hamburg
  Unconference sessions and Elbe river sunsets fuel northern Germany’s flagship camp. Get info
   
• 6 August — Team Leader Dialogue Day
  Team leads align roadmaps, tooling needs, and mentorship programs ahead of the Developer Days. Apply
   
• 7 August — TYPO3 Developer Days
  Four days of workshops, hallway hacking, and nightly socials — sign up now, tickets are going fast. Details

TYPO3 Community & Ecosystem Insights

• Remote Best-Practices Day — Automation tricks, CI patterns, and design tokens from April’s virtual sprint. Read summary
   
• From Local to Live — New docs outline seamless deployment steps, covering Git workflows, composer locks, and env-specific secrets. Enhance your rollout
   
• Enum Hydration in Extbase — Brotkrueml dives deep into leveraging PHP 8.2 backed enums inside domain models with minimal boilerplate. Technical guide
   
• Mastering Localization & Staging — b13 shares enterprise-scale strategies for content freezes, shadow workspaces, and progressive releases. Full article
   
• Why Accessibility Is No Longer an Option — But an Obligation — Accessibility is an opportunity to create inclusive, user-friendly, and future-proof digital experiences. Read article
   
• Digital Public Good Deep-Dive — Why DPG status elevates funding prospects and civic-tech adoption worldwide. Insight
   
• AI & Spatial Computing — How generative product previews and immersive storefronts will reshape TYPO3 ecommerce experiences. Future trends
   
• Blocking XSS in TYPO3 — Learn modern CSP headers, sanitizer usage, and safe-HTML best practices to secure front-end output. Security tips
   
• TYPO3 Content Blocks vs. Mask vs. DCE vs. Flux — Compares flexibility, learning curves, and long-term maintenance for popular page-builder approaches. Compare now

Share Your TYPO3 Story & Get Recognized!

Migrated a complex site, launched a humanitarian portal, or mentored newcomers? Tell us! Your journey could inspire thousands and feature in a future issue. Submit here

Appreciation Of The Month

Huge applause to every tester who chased regressions, every writer polishing docs, and every organizer scheduling late-night video calls across time zones. Your dedication turns security advisories into rapid fixes, ideas into funded projects, and events into lifelong memories. TYPO3 thrives because you show up, share knowledge, and welcome newcomers — thank you for powering our community journey!