TYPO3 Community Expansion Committee: Activity Update January–July 2025

The committee has engaged with a range of multilateral and international organizations involved in digital public infrastructure and open-source development, including GovStack , the International…

Significant Results for Q2/2025 Community Budget Ideas

On 1 November 2023, we launched the community budget process , the aim was for a faster overall process from idea proposal to voting, through to completion of work. Four ideas were funded and…

Call for Community Budget Ideas (Q4/2025)

The call for community budget ideas for the fourth quarter of 2025 is open. Submit your idea before 8 September 2025. Decisions will be announced at the end of September. Submit Your Idea About the…

Bringing Czech to TYPO3: My Translation Journey

I’ve been working actively with TYPO3 for around seven years, but I never imagined I’d one day have my fingerprints on almost every word of its user interface. In the Czech Republic, there used to be…

Localization Team Update: New Languages, Team Growth, and Future Plans

Here’s a summary of our recent activities and a look at what’s ahead. Highlights from the First Half of 2025 Our primary goal is to make TYPO3 accessible to as many people as possible in their native…

TYPO3 13.4.17 and 12.4.36 maintenance releases published

The following TYPO3 updates have been released: TYPO3 13.4.17 LTS TYPO3 12.4.36 LTS Both versions are maintenance releases only. Composer package roave/security-advisories reported conflicts when…

Sanitization bypass in SVG Sanitizer

Type: Advisory Component Type: TYPO3 CMS Subcomponent: SVG Sanitizer (based on enshrined/svg-sanitize ) Release Date: August 14, 2025 Impact: Link Injection, in some cases Cross-Site Scripting…

TYPO3 13.4.16 and 12.4.35 maintenance releases published

The following TYPO3 updates have been released: TYPO3 13.4.16 LTS TYPO3 12.4.35 LTS Both versions are maintenance releases only. Further upgrade instructions No further database upgrades are required…

Content Blocks — International Exchange and Major Feature Releases

Alongside these community touchpoints, we’ve continued to deliver improvements and new features for Content Blocks. Together, these efforts showcase how community collaboration and ongoing development…

This Month in TYPO3: July 2025 [Issue #27]

Fresh maintenance and ELTS releases safeguard production sites, while funded Rector rules, agency roundtables, and Fluid components push innovation forward. Conference halls, sprint rooms, and…

Report From the Best Practices Remote Day July 2025

Here’s a quick recap of what happened — and why these sprints are always worth showing up for. A new month, a new Monday. So it's time again for the Remote Code Sprint, which has become a regular…

Videos Without Technical Effort — Make Your Editors Happy!

Efficient Video Compression and Conversion During Upload Up until now, editors have been able to easily work with images in TYPO3, but videos have always posed a more technical challenge. In practice,…

The Documentation Team is Looking for Superheroes

The Foundation of Our Community Good software documentation is essential because it supports knowledge sharing across the community. When it’s clear and reliable, it lowers the barrier for new users…

Community Budget Report: Implementing Rector Rules for TYPO3 v13/v14

In the second quarter of 2025, I had the opportunity to work on implementing new TYPO3 Rector rules and enhancing Fractor again. New TYPO3 Rector Rules 30 issues were closed and 35 new rules were…

Insecure Direct Object Reference in extension "femanager" (femanager)

Release Date: July 22, 2025 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: femanager (femanager) Composer Package Name:…

Insecure Direct Object Reference in extension "powermail" (powermail)

Release Date: July 22, 2025 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "powermail" (powermail) Composer Package Name:…

Seamless Deployment: Enhancing TYPO3 Documentation for a Smooth Transition from Local to Live (Final Report)

Results: Key Additions and Updates The aim of the Seamless Deployment project was to make the existing documentation on deployment more practical, easier to understand, and more complete. Not only was…

Ready, Set, London!

I’m pleased to announce that the final planning stages for TYPO3 Camp London are now complete and everything is in place for what I hope will be a fantastic event . After a day of travelling, join us…

The TYPO3 Association Has Been Authorized by the CVE Program as a CVE Numbering Authority (CNA)

TYPO3 Prominence at e-Governance Conference in Estonia

Kristian Storm-Jørgensen , Mathias Bolt Lesniak , and Stefan Busemann attended the 11th eGovernance Conference , in Tallinn, Estonia, 27–29 May 2025, for the TYPO3 Association , as a part of the Meet…

Components Have Landed in Fluid

How Components Came to Fluid Back in February, I submitted the budget idea for Component-Based Frontend Development with Fluid , which was selected. I was very happy that you selected my idea for Q2,…