2026

• 21 Apr 2026
  TYPO3 14.3.0 LTS contains a security fix for TYPO3 14.2.0 users

  Oliver Hader
• 17 Mar 2026
  [Ticket#2026031710000011] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 20 Jan 2026
  [Ticket#2026012010000018] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team

2025

• 17 Dec 2025
  [Ticket#2025121710000014] Vulnerability in third party TYPO3 CMS extension

  TYPO3 Security Team
• 12 Nov 2025
  [Ticket#2025111210000034] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 16 Sep 2025
  [Ticket#2025091610000013] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 02 Sep 2025
  [Ticket#2025090210000021] Vulnerability in third party TYPO3 CMS extension

  TYPO3 Security Team
• 22 Jul 2025
  [Ticket#2025072210000023] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 20 May 2025
  [Ticket#2025052010000012] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 18 Mar 2025
  [Ticket#2025031810000011] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 28 Jan 2025
  [Ticket#2025012810000023] Vulnerability in third party TYPO3 CMS extension

  TYPO3 Security Team

2024

• 17 Sep 2024
  [Ticket#2024091710000013] Vulnerability in third party TYPO3 CMS extension

  TYPO3 Security Team
• 27 Aug 2024
  [Ticket#2024082710000014] Vulnerability in third party TYPO3 CMS extension

  TYPO3 Security Team
• 18 Jun 2024
  [Ticket#2024061810000026] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 02 Apr 2024
  [Ticket#2024040210000014] Vulnerability in third party TYPO3 CMS extension

  TYPO3 Security Team
• 13 Feb 2024
  [Ticket#2024021310000015] Vulnerability in third party TYPO3 CMS extension

  TYPO3 Security Team

2023

• 13 Dec 2023
  [Ticket#2023121310000016] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 04 Oct 2023
  [Ticket#2023100410000019] Vulnerability in third party TYPO3 CMS extension

  TYPO3 Security Team
• 17 Aug 2023
  [Ticket#2023081710000017] Vulnerability in third party TYPO3 CMS extension

  TYPO3 Security Team
• 13 Jun 2023
  [Ticket#2023061310000019] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 22 Mar 2023
  [Ticket#2023032210000016] Vulnerability in third party TYPO3 CMS extension

  TYPO3 Security Team
• 21 Feb 2023
  [Ticket#2023022110000011] Vulnerability in third party TYPO3 CMS extension

  TYPO3 Security Team
• 06 Feb 2023
  Pre-announcing important security releases

  Oliver Hader
• 31 Jan 2023
  [Ticket#2023013110000011] Vulnerability in third party TYPO3 CMS extension

  TYPO3 Security Team

2022

• 13 Dec 2022
  [Ticket#2022121310000018] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 02 Nov 2022
  [Ticket#2022110210000013] Vulnerability in third party TYPO3 CMS extension

  TYPO3 Security Team
• 12 Jul 2022
  [Ticket#2022071210000011] Vulnerability in third party TYPO3 CMS extension

  TYPO3 Security Team
• 14 Jun 2022
  [Ticket#2022061410000019] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 26 Apr 2022
  [Ticket#2022042610000018] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 15 Feb 2022
  [Ticket#2022021510000015] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team

2021

• 16 Dec 2021
  Published Public Service Announcements concerning Security Aspects

  Oliver Hader
• 10 Nov 2021
  [Ticket#2021111010000027] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 10 Aug 2021
  [Ticket#2021081010000015] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 27 Apr 2021
  [Ticket#2021042710000045] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 16 Mar 2021
  [Ticket#2021031610000022] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team

2020

• 17 Nov 2020
  [Ticket#202011175760000012] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 02 Sep 2020
  [Ticket#202009025760000027] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 29 Jul 2020
  [Ticket#202007295760000034] Vulnerability in third party TYPO3 extension "dlf"

  TYPO3 Security Team
• 28 Jul 2020
  Vulnerability in third party TYPO3 extension "mediace"

  Oliver Hader
• 28 Jul 2020
  Critical vulnerability in legacy TYPO3 CMS 6.2

  Oliver Hader
• 07 Jul 2020
  [Ticket#202007075760000021] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 12 May 2020
  [Ticket#202005125760000015] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 10 Mar 2020
  [Ticket#202003105760000031] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team

2019

• 17 Dec 2019
  [Ticket#201912175760000031] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 15 Oct 2019
  [Ticket#201910155760000011] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 07 May 2019
  [Ticket#201905075760000019] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team

2018

• 20 Nov 2018
  [Ticket#201811205760000029] Announcing TYPO3 security related information

  TYPO3 Security Team
• 09 Aug 2018
  [Ticket#201808095760000011] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team

2017

• 19 Dec 2017
  Vulnerabilities in multiple third party TYPO3 CMS extensions

  Nicole Cordes
• 07 Nov 2017
  [Ticket#201711075760000011] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 06 Sep 2017
  Critical security issue in the Extension Repository (TER)

  Nicole Cordes
• 05 Sep 2017
  [Ticket#201709055760000019] Vulnerabilities in multiple TYPO3 components

  TYPO3 Security Team
• 11 Jul 2017
  [Ticket#201707115760000029] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 28 Feb 2017
  Multiple vulnerabilities in TYPO3 CMS

  Nicole Cordes

2016

• 22 Nov 2016
  Insecure Unserialize and Path Traversal vulnerabilities found in TYPO3 Core

  TYPO3 Security Team
• 14 Nov 2016
  Vulnerabilities in multiple third party TYPO3 CMS extensions

  Nicole Cordes
• 11 Nov 2016
  Vulnerabilities in multiple third party TYPO3 CMS extensions

  Nicole Cordes
• 29 Sep 2016
  Vulnerabilities in third party TYPO3 CMS extensions

  Nicole Cordes
• 13 Sep 2016
  Vulnerabilities in multiple TYPO3 components

  TYPO3 Security Team
• 07 Jul 2016
  Vulnerabilities in third party TYPO3 CMS extension

  Nicole Cordes
• 15 Jun 2016
  Vulnerabilities in third party TYPO3 CMS extension

  Nicole Cordes
• 31 May 2016
  Vulnerabilities in multiple third party TYPO3 CMS extensions

  Nicole Cordes
• 27 May 2016
  Vulnerabilities in multiple third party TYPO3 CMS extensions

  Nicole Cordes
• 24 May 2016
  URGENT: Critical vulnerability in TYPO3 CMS has been found and fixed

  TYPO3 Security Team
• 20 May 2016
  Important Security-Bulletin Pre-Announcement

  TYPO3 Security Team
• 05 May 2016
  Vulnerabilities in the third party tool ImageMagick

  Nicole Cordes
• 12 Apr 2016
  Vulnerabilities in multiple TYPO3 components

  TYPO3 Security Team
• 24 Mar 2016
  Vulnerabilities in one third party TYPO3 CMS extension

  Nicole Cordes
• 10 Mar 2016
  Vulnerabilities in multiple third party TYPO3 CMS extensions

  Nicole Cordes
• 03 Mar 2016
  Vulnerabilities in multiple third party TYPO3 CMS extensions

  Nicole Cordes
• 23 Feb 2016
  [Ticket#201602234084000031] Multiple vulnerabilities in TYPO3 CMS

  TYPO3 Security Team
• 16 Feb 2016
  Cross-Site Scripting and SQL Injection vulnerabilities in TYPO3 CMS

  TYPO3 Security Team

2015

• 15 Dec 2015
  Multiple vulnerabilities in TYPO3 CMS

  TYPO3 Security Team
• 30 Sep 2015
  Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 08 Sep 2015
  Multiple vulnerabilities in TYPO3 CMS

  TYPO3 Security Team
• 01 Jul 2015
  Multiple vulnerabilities in TYPO3 CMS

  TYPO3 Security Team
• 15 Jun 2015
  Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 17 Feb 2015
  Important Security-Bulletin Pre-Announcement

  TYPO3 Security Team
• 17 Feb 2015
  Cross-Site Scripting vulnerability in extension Gridelements (gridelements)

  TYPO3 Security Team
• 09 Jan 2015
  [Ticket#2015010910000015] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team

2014

• 15 Dec 2014
  [Ticket#2014121510000039] Cross-Site Scripting vulnerability in extension wfGallery (wf_gallery)

  TYPO3 Security Team
• 15 Dec 2014
  [Ticket#2014121510000021] Multiple vulnerabilities in extension BibTex Publications (si_bibtex)

  TYPO3 Security Team
• 15 Dec 2014
  [Ticket#2014121510000011] Multiple vulnerabilities in extension Drag Drop Mass Upload

  TYPO3 Security Team
• 10 Dec 2014
  Link spoofing and cache poisoning vulnerabilities in TYPO3 CMS

  TYPO3 Security Team
• 08 Dec 2014
  [Ticket#2014120810000016] Multiple vulnerabilities in extension phpMyAdmin (phpmyadmin) - XMas edition

  TYPO3 Security Team
• 27 Nov 2014
  [Ticket#2014112710000045] Improper Access Control vulnerability in extension WebDav for filemounts (webdav)

  TYPO3 Security Team
• 05 Nov 2014
  [TYPO3-announce] [Ticket#2014110510000078] Cross-Site Scripting vulnerability in extension phpMyAdmin

  TYPO3 Security Team
• 22 Oct 2014
  Remote Code Execution and Denial of Service Vulnerabilities found in TYPO3 Core

  TYPO3 Security Team
• 17 Oct 2014
  [Ticket#2014101710000101] Information Disclosure vulnerability in extension Dynamic Content Elements (dce)

  TYPO3 Security Team
• 17 Oct 2014
  [TYPO3-announce] [Ticket#2014101710000084] Improper Access Control vulnerability in extension fal_sftp (fal_sftp)

  TYPO3 Security Team
• 17 Oct 2014
  [Ticket#2014101710000011] Denial of Service vulnerability in extension Calendar Base (cal)

  TYPO3 Security Team
• 26 Sep 2014
  [Ticket#2014092610000024] Several vulnerabilities in extension phpMyAdmin

  TYPO3 Security Team
• 25 Sep 2014
  [Ticket#2014092510000026] Several vulnerabilities in extension JobControl

  TYPO3 Security Team
• 02 Sep 2014
  [Ticket#2014090210000033] Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 03 Jun 2014
  [Ticket#2014060310000028] Security issues in third party TYPO3 extension news

  TYPO3 Security Team
• 27 May 2014
  Cross-Site Scripting vulnerability in third party extension gridelements

  TYPO3 Security Team
• 22 May 2014
  Multiple Vulnerabilities in TYPO3 CMS

  TYPO3 Security Team
• 10 Apr 2014
  Minor security issue in third party extension "Powermail" (powermail)

  TYPO3 Security Team
• 12 Feb 2014
  Vulnerabilities in multiple third party TYPO3 CMS extensions

  TYPO3 Security Team
• 31 Jan 2014
  TYPO3-PSA-2014-001: Cross-Site Request Forgery Protection in TYPO3 CMS 6.2

  TYPO3 Security Team

2013

• 10 Dec 2013
  Multiple Vulnerabilities found in TYPO3 CMS

  TYPO3 Security Team
• 25 Sep 2013
  [Ticket#2013092510000073] Security issues in third party TYPO3 extension

  TYPO3 Security Team
• 25 Sep 2013
  [Ticket#2013092510000064] Security issues in several third party TYPO3 ectensions

  TYPO3 Security Team
• 04 Sep 2013
  Incomplete Access Management and Remote Code Execution Vulnerabilities found in TYPO3 Core

  TYPO3 Security Team
• 05 Aug 2013
  [Ticket#2013080510000059] Security issues in several third party TYPO3 ectensions

  TYPO3 Security Team
• 05 Aug 2013
  [Ticket#2013080510000013] Security issues in several third party TYPO3 ectensions

  TYPO3 Security Team
• 30 Jul 2013
  Cross-Site Scripting and Remote Code Execution Vulnerabilities found in TYPO3 Core

  TYPO3 Security Team
• 03 Jun 2013
  [Ticket#2013060310000039] Security issues in several third party TYPO3 extensions including powermail and multishop

  TYPO3 Security Team
• 06 Mar 2013
  TYPO3 CMS Core Security Advisory TYPO3-CORE-SA-2013-001

  TYPO3 Security Team
• 19 Feb 2013
  [Ticket#2013021910000016] Security issues in several third party TYPO3 extensions including cooluri and static_info_tables

  TYPO3 Security Team
• 28 Jan 2013
  [Ticket#2013012810000028] Security issues in several third party TYPO3 extensions

  TYPO3 Security Team
• 11 Jan 2013
  [Ticket#2013011110000023] Security issues in several third party TYPO3 extensions

  TYPO3 Security Team

2012

• 31 Dec 2012
  [Ticket#2012123110000011] Vulnerabilities in third party TYPO3 extensions commerce and formhandler (late notification)

  TYPO3 Security Team
• 08 Nov 2012
  Multiple vulnerabilities found in TYPO3 Core

  TYPO3 Security Team
• 08 Nov 2012
  Multiple vulnerabilities found in TYPO3 Core

  TYPO3 Security Team
• 15 Aug 2012
  Multiple vulnerabilities found in TYPO3 Core

  TYPO3 Security Team
• 08 Aug 2012
  [Ticket#2012080810000064] Vulnerabilities in third party TYPO3 extension "powermail" (powermail)

  TYPO3 Security Team
• 04 Jul 2012
  [Ticket#2012070410000028] Vulnerability found in TYPO3 Core

  TYPO3 Security Team
• 04 Jul 2012
  [Ticket#2012070410000019] Vulnerabilities in third party TYPO3 extension "Seminar Manager" (seminars)

  TYPO3 Security Team
• 07 Jun 2012
  [Ticket#2012060710000042] Vulnerabilities third party TYPO3 extensions seo_basics, ameos_formidable and powermail

  TYPO3 Security Team
• 17 Apr 2012
  Cross-Site Scripting Vulnerability in TYPO3 Core

  TYPO3 Security Team
• 28 Mar 2012
  Multiple vulnerabilities found in TYPO3 Core

  TYPO3 Security Team
• 28 Mar 2012
  [Ticket#2012032810000017] Security issues in several third party TYPO3 ectensions including powermail and seo_basics

  TYPO3 Security Team
• 23 Feb 2012
  [Ticket#2012022310000055] Security issues in several third party TYPO3 extensions including "Frontend User Registration" (sr_f [...]

  TYPO3 Security Team
• 02 Feb 2012
  [Ticket#2012020210000031] Security issues in several third party TYPO3 extensions

  TYPO3 Security Team

2011

• 16 Dec 2011
  [Ticket#2011121610000051] Vulnerability found in TYPO3 Core

  TYPO3 Security Team
• 15 Dec 2011
  [Ticket#2011121510000044] Important Security-Bulletin Pre-Announcement

  TYPO3 Security Team
• 15 Nov 2011
  [Ticket#2011111510000037] Vulnerabilities in third party TYPO3 extensions eu_ldap and phpmyadmin

  TYPO3 Security Team
• 20 Oct 2011
  Critical vulnerabilities in third party TYPO3 extensions pmkshadowbox, pmkslimbox and pdf_generator2

  TYPO3 Security Team
• 18 Oct 2011
  [Ticket#2011101810000033] Security issues in third party TYPO3 extension "phpMyAdmin"

  TYPO3 Security Team
• 29 Sep 2011
  Security issue in third party TYPO3 extensions "T3Blog" (t3blog)

  TYPO3 Security Team
• 28 Sep 2011
  Security issues in several third party TYPO3 extensions

  TYPO3 Security Team
• 15 Sep 2011
  [Ticket#2011091510000041] Security issues in third party TYPO3 extension "phpMyAdmin"

  TYPO3 Security Team
• 14 Sep 2011
  Multiple vulnerabilities found in TYPO3 Core

  TYPO3 Security Team
• 07 Sep 2011
  Security issues in several third party TYPO3 extensions

  TYPO3 Security Team
• 29 Aug 2011
  Security issues in several third party TYPO3 extensions

  TYPO3 Security Team
• 26 Aug 2011
  Security issues in third party TYPO3 extension "phpMyAdmin"

  TYPO3 Security Team
• 25 Aug 2011
  Security issues in third party TYPO3 extensions "Formhandler" (formhandler) and "Questionaire" (pbsurvey)

  TYPO3 Security Team
• 03 Aug 2011
  Security issues in third party TYPO3 extension "Website Photo Gallery" (jm_gallery)

  TYPO3 Security Team
• 27 Jul 2011
  Multiple vulnerabilities found in TYPO3 Core

  TYPO3 Security Team
• 25 Jul 2011
  [Ticket#2011072510000017] Security issues in third party TYPO3 extension "phpMyAdmin"

  TYPO3 Security Team
• 06 Jul 2011
  Security issues in third party TYPO3 extension "phpMyAdmin"

  TYPO3 Security Team
• 29 Jun 2011
  SQL Injection vulnerability in third party TYPO3 extension ke_search

  TYPO3 Security Team
• 14 Jun 2011
  [Ticket#2011061410000049] Security issues in several third party TYPO3 extensions

  TYPO3 Security Team
• 23 May 2011
  [Ticket#2011052310000015] Security issues in third party TYPO3 extension "phpMyAdmin"

  TYPO3 Security Team
• 11 May 2011
  [Ticket#2011051110000011] Security issue in third party TYPO3 extension "powermail"

  TYPO3 Security Team
• 07 Apr 2011
  [Ticket#2011040710000011] Security issue in third party TYPO3 extension "WEC Discussion Forum"

  TYPO3 Security Team
• 15 Mar 2011
  Security issues in third party TYPO3 extension "Direct Mail"

  TYPO3 Security Team
• 26 Jan 2011
  [Ticket#2011012610000017] Security issue in third party TYPO3 extension "Media [DAM]"

  TYPO3 Security Team

2010

• 16 Dec 2010
  Multiple vulnerabilities found in TYPO3 Core

  TYPO3 Security Team
• 26 Oct 2010
  [Ticket#2010102610000029] Security issue in third party extension powermail

  TYPO3 Security Team
• 06 Oct 2010
  Multiple vulnerabilities found in TYPO3 Core, one of them beeing critical

  Security Team
• 05 Oct 2010
  [Ticket#2010100510000014] Important Security-Bulletin Pre-Announcement

  TYPO3 Security Team
• 22 Sep 2010
  Security issues in third party TYPO3 extension "powermail"

  Security Team
• 02 Sep 2010
  [Ticket#2010090210000013] Security issues in several third-party TYPO3 extensions

  TYPO3 Security Team
• 23 Aug 2010
  [Ticket#2010082310000039] Security issue in third party extension phpMyAdmin

  TYPO3 Security Team
• 13 Aug 2010
  [Ticket#2010081310000012] Security issue in third party extension mm_forum

  TYPO3 Security Team
• 11 Aug 2010
  Security issues in several third party TYPO3 extensions

  Security Team
• 29 Jul 2010
  [Ticket#2010072910000011] Security issue in third party extension phpMyAdmin

  TYPO3 Security Team
• 28 Jul 2010
  [Ticket#2010072810000013] Multiple vulnerabilities found in TYPO3 Core and th third party extension "Front End User Registrati [...]

  TYPO3 Security Team
• 14 Apr 2010
  [Ticket#2010041410000018] Security issues in several third party TYPO3 extensions error_404_handling, sr_feuser_register and t [...]

  TYPO3 Security Team
• 09 Apr 2010
  [Ticket#2010040910000019] Vulnerability found in TYPO3 Core

  TYPO3 Security Team
• 08 Apr 2010
  [Ticket#2010040810000057] Important Security-Bulletin Pre-Announcement

  TYPO3 Security Team
• 16 Mar 2010
  [Ticket#2010031610000043] [UPDATE] Security issues in several third party TYPO3 extensions including mm_forum

  TYPO3 Security Team
• 16 Mar 2010
  [Ticket#2010031610000025] Security issues in several third party TYPO3 extensions including mm_forum

  TYPO3 Security Team
• 02 Mar 2010
  [Ticket#2010030210000015] Security issue in third party extension cal

  TYPO3 Security Team
• 23 Feb 2010
  [Ticket#2010022310000013] Several vulnerabilities found in TYPO3 Core

  TYPO3 Security Team
• 01 Feb 2010
  [Ticket#2010020110000028] Security issues in several third party TYPO3 extensions including t3blog

  TYPO3 Security Team
• 14 Jan 2010
  [Ticket#2010011410000023] Vulnerability found in TYPO3 Core

  TYPO3 Security Team
• 13 Jan 2010
  [Ticket#2010011310000016] Security issues in several third party TYPO3 extensions

  TYPO3 Security Team

2009

• 15 Dec 2009
  [Ticket#2009121510000021] Security issues in several third party TYPO3 extensions

  TYPO3 Security Team
• 01 Dec 2009
  [Ticket#2009120110000011] Security issues in several third party TYPO3 extensions including cal and direct_mail

  TYPO3 Security Team
• 22 Oct 2009
  [Ticket#2009102210000048] Multiple security issues found in TYPO3 core

  TYPO3 Security Team
• 20 Oct 2009
  [Ticket#2009102010000015] Security issues in several third party TYPO3 extensions including phpmyadmin, solr, maag_randomimage [...]

  TYPO3 Security Team
• 18 Aug 2009
  [Ticket#2009081810000024] Security issues in several third party TYPO3 extensions including commerce and t3m

  TYPO3 Security Team
• 30 Jul 2009
  [Ticket#2009073010000011] Security issues in several third party TYPO3 extensions

  TYPO3 Security Team
• 16 Jun 2009
  [Ticket#2009061610000013] Security issues in several third party TYPO3 extensions including civserv, cwt_community and ve_gues [...]

  TYPO3 Security Team
• 06 Apr 2009
  Security issues in several third party TYPO3 extensions including sr_feuser_register

  Henning Pingel
• 05 Mar 2009
  Security issues in several third party TYPO3 extensions (TYPO3-SA-2009-003)

  Henning Pingel
• 09 Feb 2009
  Important Security-Bulletin Pre-Announcement

  Lars Houmark
• 20 Jan 2009
  Multiple vulnerabilities found in TYPO3 Core

  Lars Houmark

2008

• 22 Dec 2008
  Security issues in several third party TYPO3 extensions

  Henning Pingel
• 13 Nov 2008
  Cross Site Scripting vulnerabilities in TYPO3 core

  Henning Pingel
• 10 Nov 2008
  Security issues in TYPO3 extension phpMyAdmin and several other third party extensions

  Henning Pingel
• 20 Oct 2008
  Security issues in TYPO3 extension Commerce and several other third party extensions

  Henning Pingel
• 19 Sep 2008
  TYPO3 Collective Security Bulletin: TYPO3-20080919-1: Multiple third party extensions found insecure

  Lars Houmark
• 16 Sep 2008
  TYPO3 Security Bulletin TYPO3-20080916-1: Code execution vulnerability in extension phpMyAdmin

  Lars Houmark
• 01 Jul 2008
  Multiple security issues in third party TYPO3 extensions

  Lars Houmark
• 19 Jun 2008
  TYPO3 Collective Security Bulletin TYPO3-20080619-1: Several vulnerabilities in third party extensions

  Lars Houmark
• 11 Jun 2008
  TYPO3 Security Bulletin TYPO3-20080611-1: Multiple vulnerabilities in TYPO3 Core

  Lars Houmark
• 27 May 2008
  TYPO3 Security Bulletin TYPO3-20080527-2: SQL Injection in extension "Library for Frontend plugins" (sg_zfelib)

  Henning Pingel
• 27 May 2008
  TYPO3 Security Bulletin TYPO3-20080527-1: Cross Site Scripting vulnerability in extension "KJ: Image Lightbox v2" (kj_imagelightbox2)

  Henning Pingel
• 15 May 2008
  TYPO3 Security Bulletin TYPO3-20080515-2: Multiple vulnerabilities in extension Frontend Filemanager (air_filemanager)

  Henning Pingel
• 15 May 2008
  TYPO3 Security Bulletin TYPO3-20080515-1: Multiple vulnerabilities in extension Frontend User Registration (sr_feuser_register)

  Henning Pingel
• 13 May 2008
  TYPO3 Security Bulletin TYPO3-20080513-4: Multiple vulnerabilities in extension Statistics (ke_stats)

  Henning Pingel
• 13 May 2008
  TYPO3 Security Bulletin TYPO3-20080513-3: Cross Site Scripting vulnerability in extension Event Database (rlmp_eventdb)

  Henning Pingel
• 13 May 2008
  TYPO3 Security Bulletin TYPO3-20080513-2: Cross Site Scripting vulnerability in extension Questionaire (pbsurvey)

  Henning Pingel
• 13 May 2008
  TYPO3 Security Bulletin TYPO3-20080513-1: Multiple vulnerabilities in extension WT Gallery (wt_gallery)

  Henning Pingel
• 05 May 2008
  TYPO3 Security Bulletin TYPO3-20080505-2: Cross Site Scripting vulnerability in extension powermail

  Henning Pingel
• 05 May 2008
  TYPO3 Security Bulletin TYPO3-20080505-1: Multiple vulnerabilities in extension MailformPlus (th_mailformplus)

  Henning Pingel
• 16 Apr 2008
  TYPO3 Security Bulletin TYPO3-20080416-1: Multiple vulnerabilities in extension de_phpot

  Henning Pingel
• 16 Apr 2008
  TYPO3 Security Bulletin TYPO3-20080416-2: SQL Injection in extensions pmk_rssnewsexport and cm_rdfexport

  Henning Pingel

2007

• 10 Dec 2007
  TYPO3 Security Bulletin 20071210-1: SQL Injection in system extension indexed_search

  Lars Houmark
• 19 Sep 2007
  TYPO3 Security Bulletin 20070919-1: Multiple vulnerabilities in extension mm_forum

  Lars Houmark
• 01 Aug 2007
  TYPO3 Security Bulletin 20070801-1: Multiple vulnerabilities in extension ve_guestbook

  Lars Houmark
• 19 Jul 2007
  TYPO3 Security Bulletin 20070719-1: Remote shell command execution in extensions embedding PHPMailer

  Lars Houmark
• 17 Jul 2007
  TYPO3 Security Bulletin TYPO3-20070716-2: Information Disclosure from Extension phpmyadmin

  Lars Houmark
• 16 Jul 2007
  TYPO3 Security Bulletin 20070716-1: Cross Site Scripting vulnerability in faq

  Lars Houmark
• 12 Jul 2007
  TYPO3 Security Bulletin TYPO3-20070712-1: Multiple vulnerabilities in extension civserv

  Lars Houmark
• 10 Jul 2007
  TYPO3 Security Bulletin 20070710-1: SQL Injection in fechangepassword

  Lars Houmark
• 09 Jul 2007
  TYPO3 Security Bulletin TYPO3-20070709-1: Incorrect authentication in ftpbrowser

  Lars Houmark
• 03 Jul 2007
  TYPO3 Security Bulletin TYPO3-2007070703-1: Multiple vulnerabilities in all variants of MySQLDumper

  Lars Houmark
• 12 Jun 2007
  TYPO3 Security Bulletin 20070612-1: Information disclosure in w4x_backup

  Lars Houmark
• 11 Jun 2007
  TYPO3 Security Bulletin TYPO3-20070608-1: SQL injection in macina_banners / ric_rotation

  Lars Houmark
• 21 Feb 2007
  TYPO3 Security Bulletin 20070221-1: Email header injection

  Lars Houmark
• 24 Jan 2007
  TYPO3 Security Bulletin TYPO3-20070124-1: Tip-a-friend - Header injection

  Lars Houmark

2006

• 20 Dec 2006
  TYPO3 Security Bulletin TYPO3-20061220-1: Remote Command Execution in TYPO3

  Ingmar Schlecht
• 19 Dec 2006
  Pre-announcement for important security update

  Ingmar Schlecht
• 10 Oct 2006
  Security Bulletin TYPO3-20061010-1: fe_adminLib.inc

  Michael Hirdes
• 12 May 2006
  SECURITY Bulletin TYPO3-2006051201-1

  Michael Hirdes

2005

• 15 Nov 2005
  [Typo3-announce] TYPO3 version 3.8.1 available – Association improves security with new release

  Sabina Loicht [TYPO3]
• 14 Nov 2005
  [Typo3-announce] Security Bulletins: Important Security Enhancements in TYPO3 3.8.1

  Ekkehard Gümbel
• 07 Nov 2005
  [Typo3-announce] Security Bulletin TYPO3-20051107-2: th_mailformplus

  Ekkehard Gümbel
• 07 Nov 2005
  [Typo3-announce] Security Bulletin TYPO3-20051107-1: chc_forum

  Ekkehard Gümbel
• 10 Oct 2005
  [Typo3-announce] Security Bulletin TYPO3-20051010-1 : fe_news, fe_rtenews

  Ekkehard Gümbel
• 22 Aug 2005
  [Typo3-announce] Security Bulletin TYPO3-20050822-1

  Ekkehard Gümbel
• 12 Aug 2005
  [Typo3-announce] Security Bulletin TYPO3-20050812-1

  Karsten Dambekalns
• 10 Aug 2005
  [Typo3-announce] Security Bulletin TYPO3-20050725-1

  Ekkehard Gümbel
• 07 Mar 2005
  [Typo3-announce] TYPO3 Security Bulletin: mailforms (TYPO3-20050307-1)

  Ekkehard Gümbel
• 04 Mar 2005
  [Typo3-announce] TYPO3 Security Announcement: cmw_linklist (TYPO3-20050304-1)

  Ekkehard Gümbel