Information Disclosure due to Out-of-scope Site Resolution

Component Type: TYPO3 CMS Subcomponent: URL Routing (ext:core) Release Date: July 25, 2023 Vulnerability Type: Information Disclosure Affected Versions: 9.4.0-9.5.41, 10.0.0-10.4.38, 11.0.0-11.5.29,…

By-passing Cross-Site Scripting Protection in HTML Sanitizer

Component Type: TYPO3 CMS Subcomponent: HTML Sanitizer (based on typo3/html-sanitizer ) Release Date: July 25, 2023 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.7.42-8.7.52,…

TYPO3 12.4.4 and 11.5.30 security releases published

The following TYPO3 updates have been released: TYPO3 12.4.4 LTS TYPO3 11.5.30 LTS All versions are security releases and contain important security fixes - read the corresponding security advisories…

Server Team Status Report — July 2023

Single Sign-On Years ago, we introduced LDAP into the TYPO3 universe and migrated all typo3.org frontend user accounts to LDAP accounts. Since then, we have connected more and more applications to…

Inside TYPO3 – July 2023

TYPO3 12.4.3 and 11.5.29 maintenance releases published

The following TYPO3 updates have been released: TYPO3 12.4.3 LTS TYPO3 11.5.29 LTS Both versions are maintenance releases only. Further upgrade instructions TYPO3 projects running with indexed search…

Keynote Speaker Announcement for T3CON23: Nicholas Janni to Deliver Keynote Address at the TYPO3 Conference 2023

The TYPO3 Project is excited to announce Nicholas Janni as the keynote speaker for the 15th TYPO3 Conference 2023 (T3CON23). The expert on transformational leadership has titled his keynote address…

T3CON23: Call for TYPO3 Award Submissions!

There are 13 different categories in which you can nominate your project in to win one of the official TYPO3 Awards. Submission Period for TYPO3 Awards Gala at T3CON23 Opens June 20th, 2023. Get ready…

Announcement of Core Mergers 2023

In April 2023, we announced the call for Core Mergers . Today, I'm proud to welcome new and familiar faces to the team! Component Mergers Component mergers have a clear vision for one specific topic,…

Multiple vulnerabilities in extension "Canto Extension" (canto_extension)

Release Date: June 13, 2023 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Canto Extension" (canto_extension) Composer Package Name:…

SQL Injection in extension "ipandlanguageredirect" (ipandlanguageredirect)

Release Date: June 13, 2023 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "ipandlanguageredirect" (ipandlanguageredirect) Composer…

Cross-Site Scripting in extension "Faceted Search" (ke_search)

Release Date: June 13, 2023 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Faceted Search" (ke_search) Composer Package Name:…

TYPO3 12.4.2 and 11.5.28 maintenance releases published

The following TYPO3 updates have been released: TYPO3 12.4.2 LTS TYPO3 11.5.28 LTS Both versions are maintenance releases only. Further upgrade instructions No database upgrades are required for these…

Report From a Two-Day Code Sprint at the TYPO3 Offices in Düsseldorf, Germany

First Impressions and Introductions I arrived in Düsseldorf and drove across the river to the TYPO3 office building. I took the lift to the 2nd floor and stood outside the reception looking at the…

Update on the TYPO3 Content Blocks and Leadership Changes

The Structured Content Initiative is the Strategic Initiative focused on improving the content editing user experience in TYPO3 CMS. Read our last update to learn more about what we’ve been working…

TYPO3 12.4.1 and 11.5.27 maintenance releases published

The following TYPO3 updates have been released: TYPO3 12.4.1 LTS TYPO3 11.5.27 LTS Both versions are maintenance releases only. Further upgrade instructions No database upgrades are required for these…

Code the TYPO3 Core in 2023

In March 2019, we introduced a revised core development structure, consisting of four groups for coordinating TYPO3 Core development: Core Initiatives Component Mergers Framework Mergers Product Team…

Being TYPO3 at Everything Open in Melbourne

Mathias Bolt Lesniak attended Everything Open in Melbourne, Australia , 14–16 March 2023, as part of the Meet TYPO3 initiative. It is a grassroots conference with a focus on open technologies, the…

T3CON 2023: Connect, Collaborate, and Celebrate at the TYPO3 Conference

TYPO3 v12 LTS Release Parties

TYPO3 11.5.26 and 10.4.37 maintenance releases published

The following TYPO3 updates have been released: TYPO3 11.5.26 LTS TYPO3 10.4.37 LTS Both versions are maintenance releases only. Further upgrade instructions No database upgrades are required for…

TYPO3 v10 End of Free Support Announcement

We published the first sprint release of the TYPO3 v10 release series in July 2019. Three consecutive releases followed, between October 2019 and February 2020, leading to the long-term support…

Being TYPO3 at a Seminar on Locally Led Development in Civil Society Partnerships

In this article, I refer to international development cooperation as the collaborative efforts of countries, organizations, and institutions to work together to promote sustainable development and…

Report of Web Camp Venlo 2023

All sessions from Friday and Saturday were live streamed and recorded. You can watch them from the comfort of your own home on the TYPO3 Web Camp Venlo YouTube channel, @typo3campvenlo . Watch the Web…

Join the Inter-Project Documentation Rendering Code Sprint