Security Bulletins:

It has been discovered, that the third party package swiftmailer/swiftmailer is vulnerable to Remote Code Execution

It has been discovered, that TYPO3 is susceptible to Path Traversal.

It has been discovered, that TYPO3 is susceptible to Insecure Unserialize.

It has been discovered, that TYPO3 is vulnerable to Cache Flooding

It has been discovered, that TYPO3 is vulnerable to Cross-Site Scripting

It has been discovered, that TYPO3 ships example code of mso/idna-convert library that is vulnerable to Cross-Site Scripting

It has been discovered, that PHP exposes the risk of Environment Variable Injection and TYPO3 is vulnerable through third party library…

It has been discovered, that TYPO3 is susceptible to Cross-Site Scripting.

It has been discovered, that TYPO3 is susceptible to Information Disclosure.

It has been discovered, that TYPO3 is susceptible to SQL Injection.