It has been discovered that development related information can be retrieved by regular HTTP GET requests on NGINX web server environments missing…

It has been discovered that the protection against insecure deserialization can be by-passed in PharStreamWrapper component.

It has been discovered that the TYPO3 Extension Repository (TER) is vulnerable to privilege escalation.

TYPO3 releases containing a fix for a critical vulnerability will be published Tuesday 24th of May at about 10:00 a.m. CEST (08:00 a.m. GMT).

Multiple vulnerabilities in ImageMagick have been discovered, Remote Code Execution being one of them.

A TYPO3 4.5.40 release containing a security fix will be published the day after tomorrow, Thursday 19th of February at about 10:00 am CET.

TYPO3 CMS 6.2 will get CSRF Protection throughout all modules and parts that manipulate data.