Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms-core@8.7.15
purl pkg:composer/typo3/cms-core@8.7.15
Next non-vulnerable version 12.4.41
Latest non-vulnerable version 14.0.2
Risk 4.5
Vulnerabilities affecting this package (84)
Vulnerability Summary Fixed by
VCID-12y5-7b81-wkfu
Aliases:
GHSA-x4rj-f7m6-42c3
TYPO3 CMS Authentication Bypass vulnerability It has been discovered that TYPO3’s Salted Password system extension (which is a mandatory system component) is vulnerable to Authentication Bypass when using hashing methods which are related by PHP class inheritance. In standard TYPO3 core distributions stored passwords using the blowfish hashing algorithm can be overridden when using MD5 as the default hashing algorithm by just knowing a valid username. Per default the Portable PHP hashing algorithm (PHPass) is used which is not vulnerable.
8.7.17
Affected by 76 other vulnerabilities.
9.3.2
Affected by 102 other vulnerabilities.
VCID-21e8-x7mp-hugk
Aliases:
GHSA-f9hr-7cfq-mjg2
TYPO3 Arbitrary Code Execution via File List Module Due to missing file extensions in $GLOBALS['TYPO3_CONF_VARS']['BE'][‘fileDenyPattern’], backend users are allowed to upload *.phar, *.shtml, *.pl or *.cgi files which can be executed in certain web server setups. A valid backend user account is needed in order to exploit this vulnerability. Derivatives of Debian GNU Linux are handling *.phar files as PHP applications since PHP 7.1 (for unofficial packages) and PHP 7.2 (for official packages). The file extension *.shtml is bound to server side includes which are not enabled per default in most common Linux based distributions. File extension *.pl and *.cgi require additional handlers to be configured which is also not the case in most common distributions (except for /cgi-bin/ location).
8.7.23
Affected by 46 other vulnerabilities.
9.5.4
Affected by 75 other vulnerabilities.
VCID-28bf-jvah-zkhw
Aliases:
2018-07-12-1
Improper Authentication Authentication Bypass in TYPO3 CMS.
8.7.17
Affected by 76 other vulnerabilities.
9.3.2
Affected by 102 other vulnerabilities.
VCID-2meq-x4kd-bbdn
Aliases:
2019-06-25-5
Insecure Deserialization in TYPO3 CMS.
8.7.27
Affected by 32 other vulnerabilities.
9.5.8
Affected by 53 other vulnerabilities.
VCID-3gg5-1921-rbfs
Aliases:
CVE-2018-14041
GHSA-pj7m-g53m-7638
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the data-target property of scrollspy.
8.7.23
Affected by 46 other vulnerabilities.
9.5.4
Affected by 75 other vulnerabilities.
VCID-3n2r-awja-dug9
Aliases:
CVE-2019-19850
GHSA-59pj-7mjh-4465
TYPO3 SQL Injection in low-level Query Generator An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. Because escaping of user-submitted content is mishandled, the class QueryGenerator is vulnerable to SQL injection. Exploitation requires having the system extension ext:lowlevel installed, and a valid backend user who has administrator privileges.
8.7.30
Affected by 25 other vulnerabilities.
9.5.12
Affected by 47 other vulnerabilities.
10.2.2
Affected by 56 other vulnerabilities.
VCID-3v4n-fzxa-bfaw
Aliases:
2019-06-25-4
Code Injection Arbitrary Code Execution and Cross-Site Scripting in Backend API.
8.7.27
Affected by 32 other vulnerabilities.
9.5.8
Affected by 53 other vulnerabilities.
VCID-4btk-jt5n-2ugf
Aliases:
2018-12-11-8
Cross-site Scripting Cross-Site Scripting in CKEditor.
8.7.21
Affected by 59 other vulnerabilities.
9.5.2
Affected by 88 other vulnerabilities.
VCID-4jpa-6fqh-hbfg
Aliases:
CVE-2022-31048
GHSA-3r95-23jp-mhvg
Cross-Site Scripting in TYPO3's Form Framework > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (4.9) ### Problem It has been discovered that the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed to exploit this vulnerability. ### Solution Update to TYPO3 versions 8.7.47 ELTS, 9.5.35 ELTS, 10.4.29, 11.5.11 that fix the problem described above. ### Credits Thanks to Gabe Troyan who reported and fixed the issue. ### References * [TYPO3-CORE-SA-2022-003](https://typo3.org/security/advisory/typo3-core-sa-2022-003)
8.7.47
Affected by 3 other vulnerabilities.
9.5.35
Affected by 0 other vulnerabilities.
10.4.29
Affected by 28 other vulnerabilities.
11.5.11
Affected by 29 other vulnerabilities.
VCID-551q-gpyd-ffe8
Aliases:
2019-01-22-4
Cross-site Scripting Cross-Site Scripting in Fluid `ViewHelpers`.
8.7.23
Affected by 46 other vulnerabilities.
9.5.4
Affected by 75 other vulnerabilities.
VCID-5jgb-dsyx-hyb4
Aliases:
CVE-2021-21338
GHSA-4jhw-2p6j-5wmp
Open Redirection in Login Handling ### Problem It has been discovered that Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability. ### Solution Update to TYPO3 versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described. ### Credits Thanks to Alexander Kellner who reported this issue and to TYPO3 security team member Torben Hansen who fixed the issue. ### References * [TYPO3-CORE-SA-2021-001](https://typo3.org/security/advisory/typo3-core-sa-2021-001)
8.7.40
Affected by 3 other vulnerabilities.
9.5.25
Affected by 32 other vulnerabilities.
10.4.14
Affected by 38 other vulnerabilities.
11.1.1
Affected by 39 other vulnerabilities.
VCID-5mxm-88r9-hfey
Aliases:
GHSA-9rx9-7fmh-gj3g
TYPO3 Broken Access Control in Localization Handling It has been discovered that backend users having limited access to specific languages are capable of modifying and creating pages in the default language which actually should be disallowed. A valid backend user account is needed in order to exploit this vulnerability.
8.7.23
Affected by 46 other vulnerabilities.
VCID-5paq-5frf-43ed
Aliases:
CVE-2022-36107
GHSA-9c6w-55cp-5w25
TYPO3 CMS Stored Cross-Site Scripting via FileDumpController > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.0) ### Problem It has been discovered that the `FileDumpController` (backend and frontend context) is vulnerable to cross-site scripting when malicious files are displayed using this component. A valid backend user account is needed to exploit this vulnerability. ### Solution Update to TYPO3 version 7.6.58 ELTS, 8.7.48 ELTS, 9.5.37 ELTS, 10.4.32 or 11.5.16 that fix the problem described above. ### Credits Thanks to Vautia who reported this issue and to TYPO3 core & security team member Oliver Hader who fixed the issue. ### References * [TYPO3-CORE-SA-2022-009](https://typo3.org/security/advisory/typo3-core-sa-2022-009) * [Vulnerability Report on huntr.dev](https://huntr.dev/bounties/51e9b709-193c-41fd-bd4a-833aaca0bd4e/) (embargoed +30 days)
8.7.48
Affected by 0 other vulnerabilities.
9.5.37
Affected by 0 other vulnerabilities.
10.4.32
Affected by 22 other vulnerabilities.
11.5.16
Affected by 22 other vulnerabilities.
VCID-5u4q-m66t-wqcj
Aliases:
GHSA-95qm-3xp7-vfj5
TYPO3 Cross-Site Scripting in Form Framework validation handling It has been discovered that the output of field validation errors in the Form Framework is vulnerable to cross-site scripting.
8.7.30
Affected by 25 other vulnerabilities.
9.5.12
Affected by 47 other vulnerabilities.
10.2.1
Affected by 58 other vulnerabilities.
VCID-5z59-dn7p-xbc5
Aliases:
GHSA-g4c9-qfvw-fmr4
TYPO3 Cross-Site Scripting in Backend Modal Component Failing to properly encode user input, notifications shown in modal windows in the TYPO3 backend are vulnerable to cross-site scripting. A valid backend user account is needed in order to exploit this vulnerability.
8.7.21
Affected by 59 other vulnerabilities.
9.5.2
Affected by 88 other vulnerabilities.
VCID-6xmj-wbea-r7ex
Aliases:
GHSA-29m4-mx89-3mjg
TYPO3 Denial of Service in Online Media Asset Handling Online Media Asset Handling (*.youtube and *.vimeo files) in the TYPO3 backend is vulnerable to denial of service. Putting large files with according file extensions results in high consumption of system resources. This can lead to exceeding limits of the current PHP process which results in a dysfunctional backend component. A valid backend user account or write access on the server system (e.g. SFTP) is needed in order to exploit this vulnerability.
8.7.21
Affected by 59 other vulnerabilities.
9.5.2
Affected by 88 other vulnerabilities.
VCID-9g62-zd1x-3bdg
Aliases:
CVE-2019-12747
GHSA-86hp-xrhj-fhpq
TYPO3 Vulnerable to Insecure Deserialization TYPO3 8.x through 8.7.26 and 9.x through 9.5.7 allows Deserialization of Untrusted Data.
8.7.27
Affected by 32 other vulnerabilities.
9.5.8
Affected by 53 other vulnerabilities.
VCID-9gpp-ez8w-rqav
Aliases:
2019-05-07-1
Cross-site Scripting Cross-Site Scripting in Fluid Engine.
8.7.25
Affected by 43 other vulnerabilities.
9.5.6
Affected by 68 other vulnerabilities.
VCID-9jj4-ec9n-qbhs
Aliases:
2018-07-12-4
Insecure Deserialization in TYPO3 CMS.
8.7.17
Affected by 76 other vulnerabilities.
9.3.2
Affected by 102 other vulnerabilities.
VCID-9x6r-56xm-n7h7
Aliases:
GHSA-rv8r-8mh5-5376
TYPO3 Information Disclosure in Backend User Interface The element information component used to display properties of a certain record is susceptible to information disclosure. The list of references from or to the record is not properly checked for the backend user’s permissions. A valid backend user account is needed in order to exploit this vulnerability.
8.7.27
Affected by 32 other vulnerabilities.
9.5.8
Affected by 53 other vulnerabilities.
VCID-9zqs-hjay-fkev
Aliases:
GHSA-22q7-cg4r-p9mx
TYPO3 Cross-Site Scripting in Fluid ViewHelpers Failing to properly encode user input, templates using built-in Fluid ViewHelpers are vulnerable to cross-site scripting.
8.7.23
Affected by 46 other vulnerabilities.
9.5.4
Affected by 75 other vulnerabilities.
VCID-a563-vtwa-hkbr
Aliases:
GHSA-66c2-7g4p-wx4p
TYPO3 Information Disclosure in Install Tool The Install Tool exposes the current TYPO3 version number to non-authenticated users.
8.7.21
Affected by 59 other vulnerabilities.
9.5.2
Affected by 88 other vulnerabilities.
VCID-axaf-45kr-kbfe
Aliases:
2019-01-22-2
Security Misconfiguration for Backend User Accounts.
8.7.23
Affected by 46 other vulnerabilities.
9.5.4
Affected by 75 other vulnerabilities.
VCID-axvk-13qf-tka7
Aliases:
CVE-2024-22188
GHSA-5w2h-59j3-8x5w
TYPO3 Install Tool vulnerable to Code Execution ### Problem Several settings in the Install Tool for configuring the path to system binaries were vulnerable to code execution. Exploiting this vulnerability requires an administrator-level backend user account with system maintainer permissions. The corresponding change for this advisory involves enforcing the known disadvantages described in [TYPO3-PSA-2020-002: Protecting Install Tool with Sudo Mode](https://typo3.org/security/advisory/typo3-psa-2020-002). ### Solution Update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described. ### Credits Thanks to Rickmer Frier & Daniel Jonka who reported this issue and to TYPO3 core & security team member Benjamin Franzke who fixed the issue. ### References * [TYPO3-CORE-SA-2024-002](https://typo3.org/security/advisory/typo3-core-sa-2024-002)
8.7.57
Affected by 0 other vulnerabilities.
9.5.46
Affected by 0 other vulnerabilities.
10.4.43
Affected by 0 other vulnerabilities.
11.5.35
Affected by 9 other vulnerabilities.
12.4.11
Affected by 10 other vulnerabilities.
13.0.1
Affected by 11 other vulnerabilities.
VCID-ayw6-8pn4-17eb
Aliases:
GHSA-96jg-pmc4-cx39
TYPO3 CMS Insecure Deserialization It has been discovered that the Form Framework (system extension `form`) is vulnerable to Insecure Deserialization when being used with the additional PHP PECL package `yaml`, which is capable of unserializing YAML contents to PHP objects. A valid backend user account as well as having PHP setting `yaml.decode_php` enabled is needed to exploit this vulnerability (which is the default value according to PHP documentation).
8.7.17
Affected by 76 other vulnerabilities.
9.3.1
Affected by 105 other vulnerabilities.
VCID-b6er-h7dm-3bev
Aliases:
GHSA-gqqf-g5r7-84vf
GMS-2022-4096
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.7) ### Problem Due to a parsing issue in upstream package [`masterminds/html5`](https://packagist.org/packages/masterminds/html5), malicious markup used in a sequence with special HTML comments cannot be filtered and sanitized. This allows to by-pass the cross-site scripting mechanism of [`typo3/html-sanitizer`](https://github.com/TYPO3/html-sanitizer). ### Solution Update to TYPO3 version 7.6.58 ELTS, 8.7.48 ELTS, 9.5.37 ELTS, 10.4.32 or 11.5.16 that fix the problem described above. ### Credits Thanks to David Klein who reported this issue, and to TYPO3 security team member Oliver Hader who fixed the issue. ### References * [TYPO3-CORE-SA-2022-011](https://typo3.org/security/advisory/typo3-core-sa-2022-011) * [GHSA-47m6-46mj-p235](https://github.com/TYPO3/html-sanitizer/security/advisories/GHSA-47m6-46mj-p235)
8.7.48
Affected by 0 other vulnerabilities.
9.5.37
Affected by 0 other vulnerabilities.
10.4.32
Affected by 22 other vulnerabilities.
11.5.16
Affected by 22 other vulnerabilities.
VCID-b81w-n2ne-z3ee
Aliases:
GHSA-hjx5-v9xg-7h25
TYPO3 Denial of Service in Frontend Record Registration TYPO3’s built-in record registration functionality (aka “basic shopping cart”) using recs URL parameters is vulnerable to denial of service. Failing to properly ensure that anonymous user sessions are valid, attackers can use this vulnerability in order to create an arbitrary amount of individual session-data records in the database.
8.7.21
Affected by 59 other vulnerabilities.
VCID-bajy-qbwq-fufn
Aliases:
CVE-2022-31047
GHSA-fh99-4pgr-8j99
Insertion of Sensitive Information into Log File in typo3/cms-core > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C` (4.9) ### Problem It has been discovered that system internal credentials or keys (e.g. database credentials) have been logged as plaintext in exception handlers, when logging the complete exception stack trace. ### Solution Update to TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.35 ELTS, 10.4.29, 11.5.11 that fix the problem described above. ### Credits Thanks to Marco Huber who reported this issue and to TYPO3 security member Torben Hansen who fixed the issue. ### References * [TYPO3-CORE-SA-2022-002](https://typo3.org/security/advisory/typo3-core-sa-2022-002)
8.7.47
Affected by 3 other vulnerabilities.
9.5.35
Affected by 0 other vulnerabilities.
10.4.29
Affected by 28 other vulnerabilities.
11.5.11
Affected by 29 other vulnerabilities.
VCID-bnne-7p2q-eqd2
Aliases:
2018-12-11-6
Uncontrolled Resource Consumption Denial of Service in Online Media Asset Handling.
8.7.21
Affected by 59 other vulnerabilities.
9.5.2
Affected by 88 other vulnerabilities.
VCID-cm14-t8uv-k3es
Aliases:
2019-06-25-3
Security Misconfiguration in Frontend Session Handling.
8.7.27
Affected by 32 other vulnerabilities.
9.5.8
Affected by 53 other vulnerabilities.
VCID-d99v-v9cj-zfh2
Aliases:
GHSA-rxc9-f2x6-qh4w
TYPO3 Security Misconfiguration for Backend User Accounts When using the TYPO3 backend in order to create new backend user accounts, database records containing insecure or empty credentials might be persisted. When the type of user account is changed - which might be entity type or the admin flag for backend users - the backend form is reloaded in order to reflect changed configuration possibilities. However, this leads to persisting the current state as well, which can result into some of the following: - account contains empty login credentials (username and/or password) - account is incomplete and contains weak credentials (username and/or password) Albeit the functionality provided by the TYPO3 core cannot be used either with empty usernames or empty passwords, it still can be a severe vulnerability to custom authentication service implementations. This weakness cannot be directly exploited and requires interaction on purpose by some backend user having according privileges.
8.7.23
Affected by 46 other vulnerabilities.
9.5.4
Affected by 75 other vulnerabilities.
VCID-dj88-f3p8-cfbn
Aliases:
2019-01-22-7
Code Injection Arbitrary Code Execution via File List Module.
8.7.23
Affected by 46 other vulnerabilities.
9.5.4
Affected by 75 other vulnerabilities.
VCID-dm97-51uu-r7gw
Aliases:
2018-12-11-1
Cross-site Scripting Cross-Site Scripting in Online Media Asset Rendering.
8.7.21
Affected by 59 other vulnerabilities.
9.5.2
Affected by 88 other vulnerabilities.
VCID-dsu7-jjjq-f3e1
Aliases:
CVE-2021-21339
GHSA-qx3w-4864-94ch
Cleartext storage of session identifier ### Problem User session identifiers were stored in cleartext - without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - like for instance SQL injection in any other component of the system. ### Solution Update to TYPO3 versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described. ### Credits Thanks to TYPO3 security team member Oliver Hader who reported this issue and to TYPO3 core & security team members Benni Mack & Oliver Hader who fixed the issue. ### References * [TYPO3-CORE-SA-2021-006](https://typo3.org/security/advisory/typo3-core-sa-2021-006)
8.7.40
Affected by 3 other vulnerabilities.
9.5.25
Affected by 32 other vulnerabilities.
10.4.14
Affected by 38 other vulnerabilities.
11.1.1
Affected by 39 other vulnerabilities.
VCID-e268-wagv-sbex
Aliases:
GHSA-wg8h-gxf4-g4gh
TYPO3 Cross-Site Scripting in Online Media Asset Rendering Failing to properly encode user input, online media asset rendering (*.youtube and *.vimeo files) is vulnerable to cross-site scripting. A valid backend user account or write access on the server system (e.g. SFTP) is needed in order to exploit this vulnerability.
8.7.21
Affected by 59 other vulnerabilities.
9.5.2
Affected by 88 other vulnerabilities.
VCID-eajg-ctpd-2bby
Aliases:
2019-05-07-2
Security Misconfiguration in User Session Handling.
8.7.25
Affected by 43 other vulnerabilities.
9.5.6
Affected by 68 other vulnerabilities.
VCID-ebpa-58em-wqam
Aliases:
GHSA-cc97-g92w-jm65
TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution Phar files (formerly known as "PHP archives") can act als self extracting archives which leads to the fact that source code is executed when Phar files are invoked. The Phar file format is not limited to be stored with a dedicated file extension - "bundle.phar" would be valid as well as "bundle.txt" would be. This way, Phar files can be obfuscated as image or text file which would not be denied from being uploaded and persisted to a TYPO3 installation. Due to a missing sanitization of user input, those Phar files can be invoked by manipulated URLs in TYPO3 backend forms. A valid backend user account is needed to exploit this vulnerability. In theory the attack vector would be possible in the TYPO3 frontend as well, however no functional exploit has been identified so far.
8.7.17
Affected by 76 other vulnerabilities.
9.3.2
Affected by 102 other vulnerabilities.
VCID-ehzg-bzrd-kbcc
Aliases:
2018-12-11-7
Uncontrolled Resource Consumption Denial of Service in Frontend Record Registration.
8.7.21
Affected by 59 other vulnerabilities.
9.0.0
Affected by 114 other vulnerabilities.
VCID-ekfd-wp8z-d7e1
Aliases:
CVE-2021-32669
GHSA-rgcg-28xm-8mmw
Cross-site Scripting TYPO3 is an open source PHP based web content management system. have a cross-site scripting vulnerability. When settings for _backend layouts_ are not properly encoded, the corresponding grid view is vulnerable to persistent cross-site scripting. A valid backend user account is needed to exploit this vulnerability. TYPO3 contain a patch for this vulnerability.
8.7.41
Affected by 1 other vulnerability.
9.5.28
Affected by 30 other vulnerabilities.
10.4.18
Affected by 34 other vulnerabilities.
11.3.1
Affected by 36 other vulnerabilities.
VCID-f4bv-pzdy-dfcb
Aliases:
GHSA-p2h4-7fp3-cmh8
TYPO3 Disclosure of Information about Installed Extensions It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions.
8.7.23
Affected by 46 other vulnerabilities.
9.5.4
Affected by 75 other vulnerabilities.
VCID-f963-qur3-2qb7
Aliases:
CVE-2020-26227
GHSA-vqqx-jw6p-q3rf
Cross-Site Scripting in Fluid view helpers > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.7) > * CWE-79 ### Problem It has been discovered that system extension Fluid (`typo3/cms-fluid`) of the TYPO3 core is vulnerable to cross-site scripting passing user-controlled data as argument to Fluid view helpers. ``` <f:form ... fieldNamePrefix="{payload}" /> <f:be.labels.csh ... label="{payload}" /> <f:be.menus.actionMenu ... label="{payload}" /> ``` ### Solution Update to TYPO3 versions 9.5.23 or 10.4.10 that fix the problem described. ### Credits Thanks to TYPO3 security team member Oliver Hader who reported this issue and to TYPO3 security team members Helmut Hummel & Oliver Hader who fixed the issue. ### References * [TYPO3-CORE-SA-2020-010](https://typo3.org/security/advisory/typo3-core-sa-2020-010)
8.7.38
Affected by 0 other vulnerabilities.
9.5.23
Affected by 38 other vulnerabilities.
10.4.10
Affected by 46 other vulnerabilities.
VCID-g4uc-qeb6-myed
Aliases:
CVE-2024-25119
GHSA-h47m-3f78-qp9g
TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key ### Problem The plaintext value of `$GLOBALS['SYS']['encryptionKey']` was displayed in the editing forms of the TYPO3 Install Tool user interface. This allowed attackers to utilize the value to generate cryptographic hashes used for verifying the authenticity of HTTP request parameters. Exploiting this vulnerability requires an administrator-level backend user account with system maintainer permissions. ### Solution Update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described. ### Credits Thanks to TYPO3 core & security team member Benjamin Franzke who fixed the issue. ### References * [TYPO3-CORE-SA-2024-004](https://typo3.org/security/advisory/typo3-core-sa-2024-004)
8.7.57
Affected by 0 other vulnerabilities.
9.5.46
Affected by 0 other vulnerabilities.
10.4.43
Affected by 0 other vulnerabilities.
11.5.35
Affected by 9 other vulnerabilities.
12.4.11
Affected by 10 other vulnerabilities.
13.0.1
Affected by 11 other vulnerabilities.
VCID-gcnj-6qb6-pbgz
Aliases:
CVE-2019-19848
GHSA-77p4-wfr8-977w
TYPO3 Directory Traversal on ZIP extraction An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. It has been discovered that the extraction of manually uploaded ZIP archives in Extension Manager is vulnerable to directory traversal. Admin privileges are required in order to exploit this vulnerability. (In v9 LTS and later, System Maintainer privileges are also required.)
8.7.30
Affected by 25 other vulnerabilities.
9.5.12
Affected by 47 other vulnerabilities.
10.2.2
Affected by 56 other vulnerabilities.
VCID-gv1b-xtv4-4yg3
Aliases:
CVE-2024-25118
GHSA-38r2-5695-334w
TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords ### Problem Password hashes were being reflected in the editing forms of the TYPO3 backend user interface. This allowed attackers to crack the plaintext password using brute force techniques. Exploiting this vulnerability requires a valid backend user account. ### Solution Update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described. ### Credits Thanks to the TYPO3 framework merger Christian Kuhn and external security researchers Maximilian Beckmann, Klaus-Günther Schmidt who reported this issue, and TYPO3 security team member Oliver Hader who fixed the issue. ### References * [TYPO3-CORE-SA-2024-003](https://typo3.org/security/advisory/typo3-core-sa-2024-003)
8.7.57
Affected by 0 other vulnerabilities.
9.5.46
Affected by 0 other vulnerabilities.
10.4.43
Affected by 0 other vulnerabilities.
11.5.35
Affected by 9 other vulnerabilities.
12.4.11
Affected by 10 other vulnerabilities.
13.0.1
Affected by 11 other vulnerabilities.
VCID-h6y3-7gsq-skh2
Aliases:
CVE-2023-47127
GHSA-3vmm-7h4j-69rm
TYPO3 vulnerable to Weak Authentication in Session Handling TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3 installations there are always at least two different sites. Eg. first.example.org and second.example.com. In affected versions a session cookie generated for the first site can be reused on the second site without requiring additional authentication. This vulnerability has been addressed in versions 8.7.55, 9.5.44, 10.4.41, 11.5.33, and 12.4.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.
8.7.55
Affected by 0 other vulnerabilities.
9.5.44
Affected by 0 other vulnerabilities.
10.4.41
Affected by 0 other vulnerabilities.
11.5.33
Affected by 14 other vulnerabilities.
12.4.8
Affected by 15 other vulnerabilities.
VCID-he5m-6wj4-rbhc
Aliases:
CVE-2021-21357
GHSA-3vg7-jw9m-pc3f
Broken Access Control in Form Framework ### Problem Due to improper input validation, attackers can by-pass restrictions of predefined options and submit arbitrary data in the Form Designer backend module of the Form Framework. In the default configuration of the Form Framework this allows attackers to explicitly allow arbitrary mime-types for file uploads - however, default _fileDenyPattern_ successfully blocked files like _.htaccess_ or _malicious.php_. Besides that, attackers can persist those files in any writable directory of the corresponding TYPO3 installation. A valid backend user account with access to the form module is needed to exploit this vulnerability. ### Solution Update to TYPO3 versions 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described. ### Credits Thanks to Richie Lee who reported this issue and to TYPO3 contributor Ralf Zimmermann who fixed the issue. ### References * [TYPO3-CORE-SA-2021-003](https://typo3.org/security/advisory/typo3-core-sa-2021-003)
8.7.40
Affected by 3 other vulnerabilities.
9.5.25
Affected by 32 other vulnerabilities.
10.4.14
Affected by 38 other vulnerabilities.
11.1.1
Affected by 39 other vulnerabilities.
VCID-hhmn-yz5p-xkap
Aliases:
GHSA-4ppr-jw47-9qm5
TYPO3 Cross-Site Scripting in Link Handling It has been discovered that t3:// URL handling and typolink functionality are vulnerable to cross-site scripting. Not only regular backend forms are affected but also frontend extensions which use the rendering with typolink.
8.7.30
Affected by 25 other vulnerabilities.
9.5.12
Affected by 47 other vulnerabilities.
10.2.1
Affected by 58 other vulnerabilities.
VCID-j77k-hjgx-5kc5
Aliases:
2019-01-22-3
Improper Access Control Broken Access Control in Localization Handling.
8.7.23
Affected by 46 other vulnerabilities.
9.0.0
Affected by 114 other vulnerabilities.
VCID-k8af-cg9k-87a9
Aliases:
2019-01-22-5
Cross-site Scripting Cross-Site Scripting in Bootstrap CSS toolkit.
8.7.23
Affected by 46 other vulnerabilities.
9.5.4
Affected by 75 other vulnerabilities.
VCID-mh4f-vtfj-hbb1
Aliases:
GHSA-4459-qrcc-vfcf
TYPO3 Cross-Site Scripting in Form Framework Failing to properly encode user input, frontend forms handled by the form framework (system extension “form”) are vulnerable to cross-site scripting.
8.7.23
Affected by 46 other vulnerabilities.
9.5.4
Affected by 75 other vulnerabilities.
VCID-mnz3-rj21-67ad
Aliases:
CVE-2022-36105
GHSA-m392-235j-9r7r
TYPO3 CMS vulnerable to User Enumeration via Response Timing > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C` (4.9) ### Problem It has been discovered that observing response time during user authentication (backend and frontend) can be used to distinguish between existing and non-existing user accounts. Extension authors of 3rd party TYPO3 extensions providing a custom authentication service should check if the extension is affected by the described problem. Affected extensions must implement new `MimicServiceInterface::mimicAuthUser`, which simulates corresponding times regular processing would usually take. ### Solution Update to TYPO3 version 7.6.58 ELTS, 8.7.48 ELTS, 9.5.37 ELTS, 10.4.32 or 11.5.16 that fix the problem described above. ### Credits Thanks to Vautia who reported this issue and to TYPO3 core & security team members Oliver Hader who fixed the issue. ### References * [TYPO3-CORE-SA-2022-007](https://typo3.org/security/advisory/typo3-core-sa-2022-007) * [Vulnerability Report on huntr.dev](https://huntr.dev/bounties/7d519735-2877-4fad-bd77-accde3e290a7/) (embargoed +30 days)
8.7.48
Affected by 0 other vulnerabilities.
9.5.37
Affected by 0 other vulnerabilities.
10.4.32
Affected by 22 other vulnerabilities.
11.5.16
Affected by 22 other vulnerabilities.
VCID-n15v-ta9h-6ffb
Aliases:
CVE-2021-32767
GHSA-34fr-fhqr-7235
Inclusion of Sensitive Information in Log Files TYPO3 is an open source PHP based web content management system. User credentials may been logged as plain-text. This occurs when explicitly using log level debug, which is not the default configuration. TYPO3 contain a patch for this vulnerability.
8.7.41
Affected by 1 other vulnerability.
9.5.28
Affected by 30 other vulnerabilities.
10.4.18
Affected by 34 other vulnerabilities.
11.3.1
Affected by 36 other vulnerabilities.
VCID-n1cb-8py6-bbhu
Aliases:
GHSA-ppvg-hw62-6ph9
TYPO3 Security Misconfiguration in Install Tool Cookie It has been discovered that cookies created in the Install Tool are not hardened to be submitted only via HTTP. In combination with other vulnerabilities such as cross-site scripting it can lead to hijacking an active and valid session in the Install Tool.
8.7.21
Affected by 59 other vulnerabilities.
9.5.2
Affected by 88 other vulnerabilities.
VCID-n78p-x7hh-gqcf
Aliases:
2018-12-11-5
Information Disclosure in Install Tool.
8.7.21
Affected by 59 other vulnerabilities.
9.5.2
Affected by 88 other vulnerabilities.
VCID-n7ng-zkkb-2qaz
Aliases:
CVE-2024-25120
GHSA-wf85-8hx9-gj7c
TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme ### Problem The TYPO3-specific [`t3://` URI scheme](https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references) could be used to access resources outside of the users' permission scope. This encompassed files, folders, pages, and records (although only if a valid link-handling configuration was provided). Exploiting this vulnerability requires a valid backend user account. ### Solution Update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described. ### Credits Thanks to Richie Lee who reported this issue and to TYPO3 core & security team member Benjamin Franzke who fixed the issue. ### References * [TYPO3-CORE-SA-2024-005](https://typo3.org/security/advisory/typo3-core-sa-2024-005)
8.7.57
Affected by 0 other vulnerabilities.
9.5.46
Affected by 0 other vulnerabilities.
10.4.43
Affected by 0 other vulnerabilities.
11.5.35
Affected by 9 other vulnerabilities.
12.4.11
Affected by 10 other vulnerabilities.
13.0.1
Affected by 11 other vulnerabilities.
VCID-pmzz-9rws-4ud5
Aliases:
GHSA-x428-565f-8xj2
TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API Backend API configuration using Page TSconfig is vulnerable to arbitrary code execution and cross-site scripting. TSconfig fields of page properties in backend forms can be used to inject malicious sequences. Field tsconfig_includes is vulnerable to directory traversal leading to same scenarios as having direct access to TSconfig settings. A valid backend user account having access to modify values for fields `pages.TSconfig` and `pages.tsconfig_includes` is needed in order to exploit this vulnerability.
8.7.27
Affected by 32 other vulnerabilities.
9.5.8
Affected by 53 other vulnerabilities.
VCID-pss5-as4b-cyf2
Aliases:
GHSA-xmgr-jff3-fcfv
TYPO3 Security Misconfiguration in User Session Handling When users change their password existing sessions for that particular user account are not revoked. A valid backend or frontend user account is required in order to make use of this vulnerability.
8.7.25
Affected by 43 other vulnerabilities.
9.5.6
Affected by 68 other vulnerabilities.
VCID-px44-19tj-h7aa
Aliases:
2019-01-22-6
Cross-site Scripting Cross-Site Scripting in Form Framework.
8.7.23
Affected by 46 other vulnerabilities.
9.5.4
Affected by 75 other vulnerabilities.
VCID-q8hy-wjd9-nbgp
Aliases:
2019-05-07-3
Code Injection Possible Arbitrary Code Execution in Image Processing.
8.7.25
Affected by 43 other vulnerabilities.
9.5.6
Affected by 68 other vulnerabilities.
VCID-qb4j-9tz7-m7a2
Aliases:
CVE-2018-17960
GHSA-g68x-vvqq-pvw3
Cross-site Scripting CKEditor allows user-assisted XSS involving a source-mode paste.
8.7.21
Affected by 59 other vulnerabilities.
9.5.2
Affected by 88 other vulnerabilities.
VCID-rdrs-mhaw-b3ge
Aliases:
2018-12-11-3
Cross-site Scripting Cross-Site Scripting in Frontend User Login.
8.7.21
Affected by 59 other vulnerabilities.
9.5.2
Affected by 88 other vulnerabilities.
VCID-rwqs-3ktq-qqbd
Aliases:
GHSA-8c25-vj2w-p72j
TYPO3 Cross-Site Scripting in Frontend User Login Failing to properly encode user input, login status display is vulnerable to cross-site scripting in the website frontend. A valid user account is needed in order to exploit this vulnerability - either a backend user or a frontend user having the possibility to modify their user profile. Template patterns that are affected are - ###FEUSER_[fieldName]### using system extension felogin - <!--###USERNAME###--> for regular frontend rendering (pattern can be defined individually using TypoScript setting config.USERNAME_substToken)
8.7.21
Affected by 59 other vulnerabilities.
9.5.2
Affected by 88 other vulnerabilities.
VCID-s53a-f91p-huf4
Aliases:
GHSA-82vp-jr39-4j2j
TYPO3 Security Misconfiguration in Frontend Session Handling It has been discovered session data of properly authenticated and logged in frontend users is kept and transformed into an anonymous user session during the logout process. This way the next user using the same client application gains access to previous session data.
8.7.27
Affected by 32 other vulnerabilities.
9.5.8
Affected by 53 other vulnerabilities.
VCID-s55j-8hbt-akhn
Aliases:
CVE-2022-31046
GHSA-8gmv-9hwg-w89g
Information Disclosure via Export Module > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C` (4.0) ### Problem The export functionality fails to limit the result set to allowed columns of a particular database table. This allows authenticated users to export internal details of database tables to which they already have access. ### Solution Update to TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.35 ELTS, 10.4.29, 11.5.11 that fix the problem described above. In order to address this issue, access to mentioned export functionality is completely denied for regular backend users. ℹ️ **Strong security defaults - Manual actions required** Following User TSconfig setting would allow using the export functionality for particular users: ``` options.impexp.enableExportForNonAdminUser = 1 ``` ### Credits Thanks to TYPO3 core merger Lina Wolf who reported this issue and to TYPO3 security member Torben Hansen who fixed the issue. ### References * [TYPO3-CORE-SA-2022-001](https://typo3.org/security/advisory/typo3-core-sa-2022-001)
8.7.47
Affected by 3 other vulnerabilities.
9.5.35
Affected by 0 other vulnerabilities.
10.4.29
Affected by 28 other vulnerabilities.
11.5.11
Affected by 29 other vulnerabilities.
VCID-s64f-x81f-b7ce
Aliases:
CVE-2021-32668
GHSA-6mh3-j5r5-2379
Cross-site Scripting TYPO3 contains a cross-site scripting vulnerability. When error messages are not properly encoded, the components `_QueryGenerator_` and `_QueryView_` are vulnerable to both reflected and persistent cross-site scripting. A valid backend user account having administrator privileges is needed to exploit this vulnerability. TYPO3 contain a patch for this issue.
8.7.41
Affected by 1 other vulnerability.
9.5.28
Affected by 30 other vulnerabilities.
10.4.18
Affected by 34 other vulnerabilities.
11.3.1
Affected by 36 other vulnerabilities.
VCID-sr3p-pdxy-4yhu
Aliases:
2018-07-12-2
Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS.
8.7.17
Affected by 76 other vulnerabilities.
9.3.2
Affected by 102 other vulnerabilities.
VCID-stzu-sxe6-5yf5
Aliases:
2019-06-25-1
Information Disclosure in Backend User Interface.
8.7.27
Affected by 32 other vulnerabilities.
9.5.8
Affected by 53 other vulnerabilities.
VCID-swnc-ke6h-ekew
Aliases:
GHSA-6xwf-7rfm-4gwc
TYPO3 Cross-Site Scripting in Filelist Module It has been discovered that the output table listing in the “Files” backend module is vulnerable to cross-site scripting when a file extension contains malicious sequences. Access to the file system of the server - either directly or through synchronization - is required to exploit the vulnerability.
8.7.30
Affected by 25 other vulnerabilities.
9.5.12
Affected by 47 other vulnerabilities.
10.2.1
Affected by 58 other vulnerabilities.
VCID-t1n7-eswt-73gw
Aliases:
CVE-2022-23503
GHSA-c5wx-6c2c-f7rm
GMS-2022-8132
TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework ### Problem Due to the lack of separating user-submitted data from the internal configuration in the Form Designer backend module, it was possible to inject code instructions to be processed and executed via TypoScript as PHP code. The existence of individual TypoScript instructions for a particular form item (known as [`formDefinitionOverrides`](https://docs.typo3.org/c/typo3/cms-form/main/en-us/I/Concepts/FrontendRendering/Index.html#form-element-properties)) and a valid backend user account with access to the form module are needed to exploit this vulnerability. ### Solution Update to TYPO3 versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1 that fix the problem described above. ### References * [TYPO3-CORE-SA-2022-015](https://typo3.org/security/advisory/typo3-core-sa-2022-015)
8.7.49
Affected by 0 other vulnerabilities.
9.5.38
Affected by 0 other vulnerabilities.
10.4.33
Affected by 17 other vulnerabilities.
11.5.20
Affected by 17 other vulnerabilities.
12.1.1
Affected by 18 other vulnerabilities.
VCID-t3jn-vwbx-u7cr
Aliases:
CVE-2021-21370
GHSA-x7hc-x7fm-f7qh
Cross-Site Scripting in Content Preview (CType menu) ### Problem It has been discovered that content elements of type _menu_ are vulnerable to cross-site scripting when their referenced items get previewed in the page module. A valid backend user account is needed to exploit this vulnerability. ### Solution Update to TYPO3 versions 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described. ### Credits Thanks to TYPO3 contributor Oliver Bartsch who reported and fixed the issue. ### References * [TYPO3-CORE-SA-2021-008](https://typo3.org/security/advisory/typo3-core-sa-2021-008)
8.7.40
Affected by 3 other vulnerabilities.
9.5.25
Affected by 32 other vulnerabilities.
10.4.14
Affected by 38 other vulnerabilities.
11.1.1
Affected by 39 other vulnerabilities.
VCID-taj6-zj2n-5kg8
Aliases:
CVE-2024-25121
GHSA-rj3x-wvc6-5j66
TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler ### Problem Entities of the File Abstraction Layer (FAL) could be persisted directly via `DataHandler`. This allowed attackers to reference files in the fallback storage directly and retrieve their file names and contents. The fallback storage ("zero-storage") is used as a backward compatibility layer for files located outside properly configured file storages and within the public web root directory. Exploiting this vulnerability requires a valid backend user account. ### Solution Update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described. #### ℹ️ Strong security defaults - Manual actions required When persisting entities of the File Abstraction Layer directly via DataHandler, `sys_file` entities are now denied by default, and `sys_file_reference` & `sys_file_metadata` entities are not permitted to reference files in the fallback storage anymore. When importing data from secure origins, this must be explicitly enabled in the corresponding DataHandler instance by using `$dataHandler->isImporting = true;`. ### Credits Thanks to TYPO3 core & security team member Oliver Hader who reported and fixed the issue. ### References * [TYPO3-CORE-SA-2024-006](https://typo3.org/security/advisory/typo3-core-sa-2024-006)
8.7.57
Affected by 0 other vulnerabilities.
9.5.46
Affected by 0 other vulnerabilities.
10.4.43
Affected by 0 other vulnerabilities.
11.5.35
Affected by 9 other vulnerabilities.
12.4.11
Affected by 10 other vulnerabilities.
13.0.1
Affected by 11 other vulnerabilities.
VCID-tnjd-pyys-akav
Aliases:
GHSA-5h5v-m596-r6rf
TYPO3 Possible Insecure Deserialization in Extbase Request Handling It has been discovered that request handling in Extbase can be vulnerable to insecure deserialization. User submitted payload has to be signed with a corresponding HMAC-SHA1 using the sensitive TYPO3 encryptionKey as secret - invalid or unsigned payload is not deserialized. However, since sensitive information could have been leaked by accident (e.g. in repositories or in commonly known and unprotected backup files), there is the possibility that attackers know the private encryptionKey and are able to calculate the required HMAC-SHA1 to allow a malicious payload to be deserialized. Requirements for successfully exploiting this vulnerability (all of the following): - rendering at least one Extbase plugin in the frontend - encryptionKey has been leaked (from LocalConfiguration.php or corresponding .env file)
8.7.30
Affected by 25 other vulnerabilities.
9.5.12
Affected by 47 other vulnerabilities.
VCID-tw1y-t4qj-j3d1
Aliases:
2018-12-11-2
Cross-site Scripting Cross-Site Scripting in Backend Modal Component.
8.7.21
Affected by 59 other vulnerabilities.
9.5.2
Affected by 88 other vulnerabilities.
VCID-vxry-uvph-kbfd
Aliases:
2019-06-25-2
Cross-site Scripting Cross-Site Scripting in Link Handling.
8.7.27
Affected by 32 other vulnerabilities.
9.5.8
Affected by 53 other vulnerabilities.
VCID-vyvy-y3cw-hbgr
Aliases:
CVE-2023-24814
GHSA-r4f8-f93x-5qh3
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') TYPO3 is a free and open source Content Management Framework released under the GNU General Public License. In affected versions the TYPO3 core component `GeneralUtility::getIndpEnv()` uses the unfiltered server environment variable `PATH_INFO`, which allows attackers to inject malicious content. In combination with the TypoScript setting `config.absRefPrefix=auto`, attackers can inject malicious HTML code to pages that have not been rendered and cached, yet. As a result, injected values would be cached and delivered to other website visitors (persisted cross-site scripting). Individual code which relies on the resolved value of `GeneralUtility::getIndpEnv('SCRIPT_NAME')` and corresponding usages (as shown below) is vulnerable as well. Additional investigations confirmed that at least Apache web server deployments using CGI (FPM, FCGI/FastCGI, and similar) are affected. However, there still might be the risk that other scenarios like nginx, IIS, or Apache/mod_php is vulnerable. The usage of server environment variable `PATH_INFO` has been removed from corresponding processings in `GeneralUtility::getIndpEnv()`. Besides that, the public property `TypoScriptFrontendController::$absRefPrefix` is encoded for both being used as a URI component and for being used as a prefix in an HTML context. This mitigates the cross-site scripting vulnerability. Users are advised to update to TYPO3 versions 8.7.51 ELTS, 9.5.40 ELTS, 10.4.35 LTS, 11.5.23 LTS and 12.2.0 which fix this problem. For users who are unable to patch in a timely manner the TypoScript setting `config.absRefPrefix` should at least be set to a static path value, instead of using auto - e.g. `config.absRefPrefix=/`. This workaround **does not fix all aspects of the vulnerability**, and is just considered to be an intermediate mitigation to the most prominent manifestation.
8.7.51
Affected by 0 other vulnerabilities.
9.5.40
Affected by 0 other vulnerabilities.
10.4.36
Affected by 16 other vulnerabilities.
11.5.23
Affected by 16 other vulnerabilities.
12.2.0
Affected by 17 other vulnerabilities.
VCID-wea9-egep-h7g5
Aliases:
2019-01-22-1
Information Disclosure of Installed Extensions.
8.7.23
Affected by 46 other vulnerabilities.
9.5.4
Affected by 75 other vulnerabilities.
VCID-wkm6-cgc8-bfa8
Aliases:
2018-07-12-3
Privilege Escalation & SQL Injection in TYPO3 CMS.
8.7.17
Affected by 76 other vulnerabilities.
9.3.2
Affected by 102 other vulnerabilities.
VCID-xa4m-xpa9-v7h8
Aliases:
CVE-2019-19849
GHSA-rcgc-4xfc-564v
TYPO3 Insecure Deserialization in Query Generator & Query View An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. It has been discovered that the classes QueryGenerator and QueryView are vulnerable to insecure deserialization. One exploitable scenario requires having the system extension ext:lowlevel (Backend Module: DB Check) installed, with a valid backend user who has administrator privileges. The other exploitable scenario requires having the system extension ext:sys_action installed, with a valid backend user who has limited privileges.
8.7.30
Affected by 25 other vulnerabilities.
9.5.12
Affected by 47 other vulnerabilities.
10.2.1
Affected by 58 other vulnerabilities.
VCID-xh7y-56vy-5ud8
Aliases:
CVE-2021-21355
GHSA-2r6j-862c-m2v2
Unrestricted File Upload in Form Framework ### Problem Due to the lack of ensuring file extensions belong to configured allowed mime-types, attackers can upload arbitrary data with arbitrary file extensions - however, default _fileDenyPattern_ successfully blocked files like _.htaccess_ or _malicious.php_. TYPO3 Extbase extensions, which implement a file upload and do not implement a custom _TypeConverter_ to transform uploaded files into _FileReference_ domain model objects are affected by the vulnerability as well, since the _UploadedFileReferenceConverter_ of _ext:form_ handles the file upload and will accept files of any mime-type which are persisted to the default location. In any way, uploaded files are placed in the default location _/fileadmin/user_upload/_, in most scenarios keeping the submitted filename - which allows attackers to directly reference files, or even correctly guess filenames used by other individuals, disclosing this information. No authentication is required to exploit this vulnerability. ### Solution Update to TYPO3 versions 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described. Type converter _UploadedFileReferenceConverter_ is not registered globally anymore and just handles uploaded files within the scope of the Form Framework. Guessable storage location has changed from _/fileadmin/user_upload/form\_\<random-hash\>/_ to _/fileadmin/form_uploads/<random-40-bit>_. Allowed mime-types must match expected file extensions (e.g. _application/pdf_ must be _.pdf_, and cannot be _.html_). Extbase extensions, who rely on the global availability of the _UploadedFileReferenceConverter_ must now implement a custom _TypeConverter_ to handle file uploads or explicitly implement the ext:form _UploadedFileReferenceConverter_ with appropriate setting for accepted mime-types. ### Credits Thanks to Sebastian Michaelsen, Marc Lindemann, Oliver Eglseder, Markus Volkmer, Jakob Kunzmann, Johannes Regner, Richie Lee who reported this issue, and to TYPO3 core & security team members Oliver Hader & Benni Mack, as well as TYPO3 contributor Ralf Zimmermann who fixed the issue. ### References * [TYPO3-CORE-SA-2021-002](https://typo3.org/security/advisory/typo3-core-sa-2021-002)
8.7.40
Affected by 3 other vulnerabilities.
9.5.25
Affected by 32 other vulnerabilities.
10.4.14
Affected by 38 other vulnerabilities.
11.1.1
Affected by 39 other vulnerabilities.
VCID-y32z-2d3f-gkgw
Aliases:
CVE-2021-32768
GHSA-c5c9-8c6m-727v
Cross-site Scripting TYPO3 is vulnerable to cross-site scripting. Corresponding rendering instructions via TypoScript functionality HTMLparser does not consider all potentially malicious HTML tag & attribute combinations per default. In default scenarios, a valid backend user account is needed to exploit this vulnerability. In case custom plugins used in the website frontend accept and reflect rich-text content submitted by users, no authentication is required.
8.7.42
Affected by 0 other vulnerabilities.
9.5.29
Affected by 27 other vulnerabilities.
10.4.19
Affected by 33 other vulnerabilities.
11.3.2
Affected by 35 other vulnerabilities.
VCID-zdq2-dhb2-6kaq
Aliases:
CVE-2022-23501
GHSA-jfp7-79g7-89rf
GMS-2022-8134
TYPO3 CMS vulnerable to Weak Authentication in Frontend Login ### Problem Restricting frontend login to specific users, organized in different storage folders (partitions), can be bypassed. A potential attacker might use this ambiguity in usernames to get access to a different account - however, credentials must be known to the adversary. ### Solution Update to TYPO3 versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1 that fix the problem described above. ### References * [TYPO3-CORE-SA-2022-013](https://typo3.org/security/advisory/typo3-core-sa-2022-013)
8.7.49
Affected by 0 other vulnerabilities.
9.5.38
Affected by 0 other vulnerabilities.
10.4.33
Affected by 17 other vulnerabilities.
11.5.20
Affected by 17 other vulnerabilities.
12.1.1
Affected by 18 other vulnerabilities.
VCID-zkea-ge1t-z7gn
Aliases:
CVE-2019-12748
GHSA-r6fv-56gp-j3r4
Cross-site Scripting TYPO3 allows XSS.
8.7.27
Affected by 32 other vulnerabilities.
9.5.8
Affected by 53 other vulnerabilities.
VCID-zspb-bd6j-wyd2
Aliases:
2018-12-11-4
Security Misconfiguration in Install Tool Cookie.
8.7.21
Affected by 59 other vulnerabilities.
9.5.2
Affected by 88 other vulnerabilities.
VCID-zw9b-6vkf-3fc6
Aliases:
GHSA-45wj-jv2h-jwrf
TYPO3 CMS Privilege Escalation and SQL Injection Failing to properly dissociate system related configuration from user generated configuration, the Form Framework (system extension "form") is vulnerable to SQL injection and Privilege Escalation. Basically instructions can be persisted to a form definition file that were not configured to be modified - this applies to definitions managed using the form editor module as well as direct file upload using the regular file list module. A valid backend user account as well as having system extension form activated are needed in order to exploit this vulnerability.
8.7.17
Affected by 76 other vulnerabilities.
9.3.2
Affected by 102 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T23:00:10.522130+00:00 GitLab Importer Affected by VCID-pss5-as4b-cyf2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-xmgr-jff3-fcfv.yml 38.4.0
2026-04-16T23:00:10.165672+00:00 GitLab Importer Affected by VCID-hhmn-yz5p-xkap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-4ppr-jw47-9qm5.yml 38.4.0
2026-04-16T23:00:09.847412+00:00 GitLab Importer Affected by VCID-pmzz-9rws-4ud5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-x428-565f-8xj2.yml 38.4.0
2026-04-16T23:00:09.305151+00:00 GitLab Importer Affected by VCID-6xmj-wbea-r7ex https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-29m4-mx89-3mjg.yml 38.4.0
2026-04-16T23:00:09.003609+00:00 GitLab Importer Affected by VCID-s53a-f91p-huf4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-82vp-jr39-4j2j.yml 38.4.0
2026-04-16T23:00:08.659999+00:00 GitLab Importer Affected by VCID-swnc-ke6h-ekew https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-6xwf-7rfm-4gwc.yml 38.4.0
2026-04-16T23:00:07.757162+00:00 GitLab Importer Affected by VCID-9zqs-hjay-fkev https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-22q7-cg4r-p9mx.yml 38.4.0
2026-04-16T23:00:07.246406+00:00 GitLab Importer Affected by VCID-12y5-7b81-wkfu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-x4rj-f7m6-42c3.yml 38.4.0
2026-04-16T23:00:06.989068+00:00 GitLab Importer Affected by VCID-5z59-dn7p-xbc5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-g4c9-qfvw-fmr4.yml 38.4.0
2026-04-16T23:00:06.430892+00:00 GitLab Importer Affected by VCID-21e8-x7mp-hugk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-f9hr-7cfq-mjg2.yml 38.4.0
2026-04-16T23:00:06.218676+00:00 GitLab Importer Affected by VCID-5mxm-88r9-hfey https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-9rx9-7fmh-gj3g.yml 38.4.0
2026-04-16T23:00:05.802260+00:00 GitLab Importer Affected by VCID-b81w-n2ne-z3ee https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-hjx5-v9xg-7h25.yml 38.4.0
2026-04-16T23:00:05.501907+00:00 GitLab Importer Affected by VCID-9x6r-56xm-n7h7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-rv8r-8mh5-5376.yml 38.4.0
2026-04-16T23:00:05.293913+00:00 GitLab Importer Affected by VCID-ayw6-8pn4-17eb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-96jg-pmc4-cx39.yml 38.4.0
2026-04-16T23:00:03.623532+00:00 GitLab Importer Affected by VCID-mh4f-vtfj-hbb1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-4459-qrcc-vfcf.yml 38.4.0
2026-04-16T23:00:03.343799+00:00 GitLab Importer Affected by VCID-f4bv-pzdy-dfcb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-p2h4-7fp3-cmh8.yml 38.4.0
2026-04-16T23:00:03.083032+00:00 GitLab Importer Affected by VCID-rwqs-3ktq-qqbd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-8c25-vj2w-p72j.yml 38.4.0
2026-04-16T23:00:00.143830+00:00 GitLab Importer Affected by VCID-zw9b-6vkf-3fc6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-45wj-jv2h-jwrf.yml 38.4.0
2026-04-16T22:59:59.788119+00:00 GitLab Importer Affected by VCID-5u4q-m66t-wqcj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-95qm-3xp7-vfj5.yml 38.4.0
2026-04-16T22:59:59.562239+00:00 GitLab Importer Affected by VCID-ebpa-58em-wqam https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-cc97-g92w-jm65.yml 38.4.0
2026-04-16T22:59:58.875408+00:00 GitLab Importer Affected by VCID-e268-wagv-sbex https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-wg8h-gxf4-g4gh.yml 38.4.0
2026-04-16T22:59:58.551420+00:00 GitLab Importer Affected by VCID-tnjd-pyys-akav https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-5h5v-m596-r6rf.yml 38.4.0
2026-04-16T22:59:57.825721+00:00 GitLab Importer Affected by VCID-a563-vtwa-hkbr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-66c2-7g4p-wx4p.yml 38.4.0
2026-04-16T22:59:57.336967+00:00 GitLab Importer Affected by VCID-d99v-v9cj-zfh2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-rxc9-f2x6-qh4w.yml 38.4.0
2026-04-16T22:59:57.075973+00:00 GitLab Importer Affected by VCID-n1cb-8py6-bbhu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-ppvg-hw62-6ph9.yml 38.4.0
2026-04-16T22:50:49.578779+00:00 GitLab Importer Affected by VCID-axvk-13qf-tka7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2024-22188.yml 38.4.0
2026-04-16T22:50:48.802484+00:00 GitLab Importer Affected by VCID-n7ng-zkkb-2qaz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2024-25120.yml 38.4.0
2026-04-16T22:50:47.390099+00:00 GitLab Importer Affected by VCID-taj6-zj2n-5kg8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2024-25121.yml 38.4.0
2026-04-16T22:50:46.338359+00:00 GitLab Importer Affected by VCID-g4uc-qeb6-myed https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2024-25119.yml 38.4.0
2026-04-16T22:50:45.292677+00:00 GitLab Importer Affected by VCID-gv1b-xtv4-4yg3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2024-25118.yml 38.4.0
2026-04-16T22:43:18.379820+00:00 GitLab Importer Affected by VCID-h6y3-7gsq-skh2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2023-47127.yml 38.4.0
2026-04-16T22:21:15.277461+00:00 GitLab Importer Affected by VCID-vyvy-y3cw-hbgr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2023-24814.yml 38.4.0
2026-04-16T22:18:14.461696+00:00 GitLab Importer Affected by VCID-t1n7-eswt-73gw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-23503.yml 38.4.0
2026-04-16T22:18:09.181193+00:00 GitLab Importer Affected by VCID-zdq2-dhb2-6kaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-23501.yml 38.4.0
2026-04-16T22:08:47.457740+00:00 GitLab Importer Affected by VCID-b6er-h7dm-3bev https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GMS-2022-4096.yml 38.4.0
2026-04-16T22:08:40.979564+00:00 GitLab Importer Affected by VCID-mnz3-rj21-67ad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-36105.yml 38.4.0
2026-04-16T22:08:39.438901+00:00 GitLab Importer Affected by VCID-5paq-5frf-43ed https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-36107.yml 38.4.0
2026-04-16T22:03:52.965713+00:00 GitLab Importer Affected by VCID-4jpa-6fqh-hbfg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-31048.yml 38.4.0
2026-04-16T22:03:52.365417+00:00 GitLab Importer Affected by VCID-s55j-8hbt-akhn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-31046.yml 38.4.0
2026-04-16T22:03:37.504785+00:00 GitLab Importer Affected by VCID-bajy-qbwq-fufn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-31047.yml 38.4.0
2026-04-16T22:01:00.378737+00:00 GitLab Importer Affected by VCID-3n2r-awja-dug9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-19850.yml 38.4.0
2026-04-16T21:59:12.158458+00:00 GitLab Importer Affected by VCID-zkea-ge1t-z7gn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-12748.yml 38.4.0
2026-04-16T21:59:07.229959+00:00 GitLab Importer Affected by VCID-9g62-zd1x-3bdg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-12747.yml 38.4.0
2026-04-16T21:57:55.510073+00:00 GitLab Importer Affected by VCID-gcnj-6qb6-pbgz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-19848.yml 38.4.0
2026-04-16T21:56:20.427430+00:00 GitLab Importer Affected by VCID-xa4m-xpa9-v7h8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-19849.yml 38.4.0
2026-04-16T21:28:09.459710+00:00 GitLab Importer Affected by VCID-y32z-2d3f-gkgw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32768.yml 38.4.0
2026-04-16T21:27:41.095864+00:00 GitLab Importer Affected by VCID-n15v-ta9h-6ffb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32767.yml 38.4.0
2026-04-16T21:27:38.687884+00:00 GitLab Importer Affected by VCID-s64f-x81f-b7ce https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32668.yml 38.4.0
2026-04-16T21:27:37.622460+00:00 GitLab Importer Affected by VCID-ekfd-wp8z-d7e1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32669.yml 38.4.0
2026-04-16T21:19:26.211880+00:00 GitLab Importer Affected by VCID-xh7y-56vy-5ud8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21355.yml 38.4.0
2026-04-16T21:19:24.888820+00:00 GitLab Importer Affected by VCID-dsu7-jjjq-f3e1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21339.yml 38.4.0
2026-04-16T21:19:24.028833+00:00 GitLab Importer Affected by VCID-he5m-6wj4-rbhc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21357.yml 38.4.0
2026-04-16T21:19:22.648899+00:00 GitLab Importer Affected by VCID-5jgb-dsyx-hyb4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21338.yml 38.4.0
2026-04-16T21:19:19.645980+00:00 GitLab Importer Affected by VCID-t3jn-vwbx-u7cr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21370.yml 38.4.0
2026-04-16T21:14:25.560537+00:00 GitLab Importer Affected by VCID-f963-qur3-2qb7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2020-26227.yml 38.4.0
2026-04-16T20:55:42.214779+00:00 GitLab Importer Affected by VCID-2meq-x4kd-bbdn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-5.yml 38.4.0
2026-04-16T20:55:41.578428+00:00 GitLab Importer Affected by VCID-cm14-t8uv-k3es https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-3.yml 38.4.0
2026-04-16T20:55:40.933539+00:00 GitLab Importer Affected by VCID-3v4n-fzxa-bfaw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-4.yml 38.4.0
2026-04-16T20:55:39.967397+00:00 GitLab Importer Affected by VCID-stzu-sxe6-5yf5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-1.yml 38.4.0
2026-04-16T20:55:39.313447+00:00 GitLab Importer Affected by VCID-vxry-uvph-kbfd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-2.yml 38.4.0
2026-04-16T20:54:14.344777+00:00 GitLab Importer Affected by VCID-9gpp-ez8w-rqav https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-05-07-1.yml 38.4.0
2026-04-16T20:54:12.026444+00:00 GitLab Importer Affected by VCID-q8hy-wjd9-nbgp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-05-07-3.yml 38.4.0
2026-04-16T20:54:11.388519+00:00 GitLab Importer Affected by VCID-eajg-ctpd-2bby https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-05-07-2.yml 38.4.0
2026-04-16T20:51:28.821966+00:00 GitLab Importer Affected by VCID-j77k-hjgx-5kc5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-3.yml 38.4.0
2026-04-16T20:51:28.152664+00:00 GitLab Importer Affected by VCID-px44-19tj-h7aa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-6.yml 38.4.0
2026-04-16T20:51:27.921835+00:00 GitLab Importer Affected by VCID-axaf-45kr-kbfe https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-2.yml 38.4.0
2026-04-16T20:51:27.018245+00:00 GitLab Importer Affected by VCID-dj88-f3p8-cfbn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-7.yml 38.4.0
2026-04-16T20:51:25.601600+00:00 GitLab Importer Affected by VCID-wea9-egep-h7g5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-1.yml 38.4.0
2026-04-16T20:51:25.023769+00:00 GitLab Importer Affected by VCID-551q-gpyd-ffe8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-4.yml 38.4.0
2026-04-16T20:51:24.158540+00:00 GitLab Importer Affected by VCID-k8af-cg9k-87a9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-5.yml 38.4.0
2026-04-16T20:50:33.954168+00:00 GitLab Importer Affected by VCID-dm97-51uu-r7gw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-1.yml 38.4.0
2026-04-16T20:50:33.736133+00:00 GitLab Importer Affected by VCID-4btk-jt5n-2ugf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-8.yml 38.4.0
2026-04-16T20:50:33.554318+00:00 GitLab Importer Affected by VCID-ehzg-bzrd-kbcc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-7.yml 38.4.0
2026-04-16T20:50:32.894305+00:00 GitLab Importer Affected by VCID-rdrs-mhaw-b3ge https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-3.yml 38.4.0
2026-04-16T20:50:32.686473+00:00 GitLab Importer Affected by VCID-n78p-x7hh-gqcf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-5.yml 38.4.0
2026-04-16T20:50:32.008282+00:00 GitLab Importer Affected by VCID-tw1y-t4qj-j3d1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-2.yml 38.4.0
2026-04-16T20:50:30.554195+00:00 GitLab Importer Affected by VCID-zspb-bd6j-wyd2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-4.yml 38.4.0
2026-04-16T20:50:29.406831+00:00 GitLab Importer Affected by VCID-bnne-7p2q-eqd2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-6.yml 38.4.0
2026-04-16T20:50:19.798868+00:00 GitLab Importer Affected by VCID-qb4j-9tz7-m7a2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2018-17960.yml 38.4.0
2026-04-16T20:47:35.562776+00:00 GitLab Importer Affected by VCID-3gg5-1921-rbfs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2018-14041.yml 38.4.0
2026-04-16T20:46:17.687963+00:00 GitLab Importer Affected by VCID-28bf-jvah-zkhw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-07-12-1.yml 38.4.0
2026-04-16T20:46:14.424815+00:00 GitLab Importer Affected by VCID-wkm6-cgc8-bfa8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-07-12-3.yml 38.4.0
2026-04-16T20:46:14.246672+00:00 GitLab Importer Affected by VCID-sr3p-pdxy-4yhu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-07-12-2.yml 38.4.0
2026-04-16T20:46:11.985692+00:00 GitLab Importer Affected by VCID-9jj4-ec9n-qbhs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-07-12-4.yml 38.4.0
2026-04-12T00:18:05.403718+00:00 GitLab Importer Affected by VCID-pss5-as4b-cyf2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-xmgr-jff3-fcfv.yml 38.3.0
2026-04-12T00:18:05.176797+00:00 GitLab Importer Affected by VCID-hhmn-yz5p-xkap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-4ppr-jw47-9qm5.yml 38.3.0
2026-04-12T00:18:04.971626+00:00 GitLab Importer Affected by VCID-pmzz-9rws-4ud5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-x428-565f-8xj2.yml 38.3.0
2026-04-12T00:18:04.601702+00:00 GitLab Importer Affected by VCID-6xmj-wbea-r7ex https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-29m4-mx89-3mjg.yml 38.3.0
2026-04-12T00:18:04.410345+00:00 GitLab Importer Affected by VCID-s53a-f91p-huf4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-82vp-jr39-4j2j.yml 38.3.0
2026-04-12T00:18:04.191119+00:00 GitLab Importer Affected by VCID-swnc-ke6h-ekew https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-6xwf-7rfm-4gwc.yml 38.3.0
2026-04-12T00:18:03.523156+00:00 GitLab Importer Affected by VCID-9zqs-hjay-fkev https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-22q7-cg4r-p9mx.yml 38.3.0
2026-04-12T00:18:03.133065+00:00 GitLab Importer Affected by VCID-12y5-7b81-wkfu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-x4rj-f7m6-42c3.yml 38.3.0
2026-04-12T00:18:02.955485+00:00 GitLab Importer Affected by VCID-5z59-dn7p-xbc5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-g4c9-qfvw-fmr4.yml 38.3.0
2026-04-12T00:18:02.555293+00:00 GitLab Importer Affected by VCID-21e8-x7mp-hugk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-f9hr-7cfq-mjg2.yml 38.3.0
2026-04-12T00:18:02.403320+00:00 GitLab Importer Affected by VCID-5mxm-88r9-hfey https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-9rx9-7fmh-gj3g.yml 38.3.0
2026-04-12T00:18:02.094235+00:00 GitLab Importer Affected by VCID-b81w-n2ne-z3ee https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-hjx5-v9xg-7h25.yml 38.3.0
2026-04-12T00:18:01.903652+00:00 GitLab Importer Affected by VCID-9x6r-56xm-n7h7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-rv8r-8mh5-5376.yml 38.3.0
2026-04-12T00:18:01.741062+00:00 GitLab Importer Affected by VCID-ayw6-8pn4-17eb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-96jg-pmc4-cx39.yml 38.3.0
2026-04-12T00:18:00.546280+00:00 GitLab Importer Affected by VCID-mh4f-vtfj-hbb1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-4459-qrcc-vfcf.yml 38.3.0
2026-04-12T00:18:00.369449+00:00 GitLab Importer Affected by VCID-f4bv-pzdy-dfcb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-p2h4-7fp3-cmh8.yml 38.3.0
2026-04-12T00:18:00.193799+00:00 GitLab Importer Affected by VCID-rwqs-3ktq-qqbd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-8c25-vj2w-p72j.yml 38.3.0
2026-04-12T00:17:58.178907+00:00 GitLab Importer Affected by VCID-zw9b-6vkf-3fc6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-45wj-jv2h-jwrf.yml 38.3.0
2026-04-12T00:17:57.952435+00:00 GitLab Importer Affected by VCID-5u4q-m66t-wqcj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-95qm-3xp7-vfj5.yml 38.3.0
2026-04-12T00:17:57.797574+00:00 GitLab Importer Affected by VCID-ebpa-58em-wqam https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-cc97-g92w-jm65.yml 38.3.0
2026-04-12T00:17:57.260670+00:00 GitLab Importer Affected by VCID-e268-wagv-sbex https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-wg8h-gxf4-g4gh.yml 38.3.0
2026-04-12T00:17:57.025048+00:00 GitLab Importer Affected by VCID-tnjd-pyys-akav https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-5h5v-m596-r6rf.yml 38.3.0
2026-04-12T00:17:56.494189+00:00 GitLab Importer Affected by VCID-a563-vtwa-hkbr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-66c2-7g4p-wx4p.yml 38.3.0
2026-04-12T00:17:56.137544+00:00 GitLab Importer Affected by VCID-d99v-v9cj-zfh2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-rxc9-f2x6-qh4w.yml 38.3.0
2026-04-12T00:17:55.952367+00:00 GitLab Importer Affected by VCID-n1cb-8py6-bbhu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-ppvg-hw62-6ph9.yml 38.3.0
2026-04-12T00:10:09.192532+00:00 GitLab Importer Affected by VCID-axvk-13qf-tka7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2024-22188.yml 38.3.0
2026-04-12T00:10:08.780040+00:00 GitLab Importer Affected by VCID-n7ng-zkkb-2qaz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2024-25120.yml 38.3.0
2026-04-12T00:10:07.904781+00:00 GitLab Importer Affected by VCID-taj6-zj2n-5kg8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2024-25121.yml 38.3.0
2026-04-12T00:10:07.239795+00:00 GitLab Importer Affected by VCID-g4uc-qeb6-myed https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2024-25119.yml 38.3.0
2026-04-12T00:10:06.586910+00:00 GitLab Importer Affected by VCID-gv1b-xtv4-4yg3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2024-25118.yml 38.3.0
2026-04-12T00:02:53.010752+00:00 GitLab Importer Affected by VCID-h6y3-7gsq-skh2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2023-47127.yml 38.3.0
2026-04-11T23:39:16.555927+00:00 GitLab Importer Affected by VCID-vyvy-y3cw-hbgr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2023-24814.yml 38.3.0
2026-04-11T23:35:47.968222+00:00 GitLab Importer Affected by VCID-t1n7-eswt-73gw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-23503.yml 38.3.0
2026-04-11T23:35:40.956668+00:00 GitLab Importer Affected by VCID-zdq2-dhb2-6kaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-23501.yml 38.3.0
2026-04-11T23:25:15.254198+00:00 GitLab Importer Affected by VCID-b6er-h7dm-3bev https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GMS-2022-4096.yml 38.3.0
2026-04-11T23:25:09.465506+00:00 GitLab Importer Affected by VCID-mnz3-rj21-67ad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-36105.yml 38.3.0
2026-04-11T23:25:07.861008+00:00 GitLab Importer Affected by VCID-5paq-5frf-43ed https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-36107.yml 38.3.0
2026-04-11T23:19:35.291829+00:00 GitLab Importer Affected by VCID-4jpa-6fqh-hbfg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-31048.yml 38.3.0
2026-04-11T23:19:34.650237+00:00 GitLab Importer Affected by VCID-s55j-8hbt-akhn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-31046.yml 38.3.0
2026-04-11T23:19:19.363873+00:00 GitLab Importer Affected by VCID-bajy-qbwq-fufn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-31047.yml 38.3.0
2026-04-11T23:16:37.303807+00:00 GitLab Importer Affected by VCID-3n2r-awja-dug9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-19850.yml 38.3.0
2026-04-11T23:14:43.020465+00:00 GitLab Importer Affected by VCID-zkea-ge1t-z7gn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-12748.yml 38.3.0
2026-04-11T23:14:37.753054+00:00 GitLab Importer Affected by VCID-9g62-zd1x-3bdg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-12747.yml 38.3.0
2026-04-11T23:13:23.630085+00:00 GitLab Importer Affected by VCID-gcnj-6qb6-pbgz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-19848.yml 38.3.0
2026-04-11T23:11:44.713002+00:00 GitLab Importer Affected by VCID-xa4m-xpa9-v7h8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-19849.yml 38.3.0
2026-04-11T22:41:06.763884+00:00 GitLab Importer Affected by VCID-y32z-2d3f-gkgw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32768.yml 38.3.0
2026-04-11T22:40:37.673275+00:00 GitLab Importer Affected by VCID-n15v-ta9h-6ffb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32767.yml 38.3.0
2026-04-11T22:40:35.168116+00:00 GitLab Importer Affected by VCID-s64f-x81f-b7ce https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32668.yml 38.3.0
2026-04-11T22:40:34.104788+00:00 GitLab Importer Affected by VCID-ekfd-wp8z-d7e1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32669.yml 38.3.0
2026-04-11T22:31:44.625455+00:00 GitLab Importer Affected by VCID-xh7y-56vy-5ud8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21355.yml 38.3.0
2026-04-11T22:31:43.205672+00:00 GitLab Importer Affected by VCID-dsu7-jjjq-f3e1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21339.yml 38.3.0
2026-04-11T22:31:42.287222+00:00 GitLab Importer Affected by VCID-he5m-6wj4-rbhc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21357.yml 38.3.0
2026-04-11T22:31:40.805073+00:00 GitLab Importer Affected by VCID-5jgb-dsyx-hyb4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21338.yml 38.3.0
2026-04-11T22:31:37.623709+00:00 GitLab Importer Affected by VCID-t3jn-vwbx-u7cr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21370.yml 38.3.0
2026-04-11T22:26:31.157307+00:00 GitLab Importer Affected by VCID-f963-qur3-2qb7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2020-26227.yml 38.3.0
2026-04-11T22:06:42.422092+00:00 GitLab Importer Affected by VCID-2meq-x4kd-bbdn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-5.yml 38.3.0
2026-04-11T22:06:41.691104+00:00 GitLab Importer Affected by VCID-cm14-t8uv-k3es https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-3.yml 38.3.0
2026-04-11T22:06:40.991725+00:00 GitLab Importer Affected by VCID-3v4n-fzxa-bfaw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-4.yml 38.3.0
2026-04-11T22:06:39.963945+00:00 GitLab Importer Affected by VCID-stzu-sxe6-5yf5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-1.yml 38.3.0
2026-04-11T22:06:39.284684+00:00 GitLab Importer Affected by VCID-vxry-uvph-kbfd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-2.yml 38.3.0
2026-04-11T22:05:11.018661+00:00 GitLab Importer Affected by VCID-9gpp-ez8w-rqav https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-05-07-1.yml 38.3.0
2026-04-11T22:05:08.756466+00:00 GitLab Importer Affected by VCID-q8hy-wjd9-nbgp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-05-07-3.yml 38.3.0
2026-04-11T22:05:08.085601+00:00 GitLab Importer Affected by VCID-eajg-ctpd-2bby https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-05-07-2.yml 38.3.0
2026-04-11T22:02:12.190465+00:00 GitLab Importer Affected by VCID-j77k-hjgx-5kc5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-3.yml 38.3.0
2026-04-11T22:02:11.472457+00:00 GitLab Importer Affected by VCID-px44-19tj-h7aa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-6.yml 38.3.0
2026-04-11T22:02:11.235665+00:00 GitLab Importer Affected by VCID-axaf-45kr-kbfe https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-2.yml 38.3.0
2026-04-11T22:02:10.334010+00:00 GitLab Importer Affected by VCID-dj88-f3p8-cfbn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-7.yml 38.3.0
2026-04-11T22:02:08.820683+00:00 GitLab Importer Affected by VCID-wea9-egep-h7g5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-1.yml 38.3.0
2026-04-11T22:02:08.214106+00:00 GitLab Importer Affected by VCID-551q-gpyd-ffe8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-4.yml 38.3.0
2026-04-11T22:02:07.331781+00:00 GitLab Importer Affected by VCID-k8af-cg9k-87a9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-5.yml 38.3.0
2026-04-11T22:01:12.202421+00:00 GitLab Importer Affected by VCID-dm97-51uu-r7gw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-1.yml 38.3.0
2026-04-11T22:01:11.976459+00:00 GitLab Importer Affected by VCID-4btk-jt5n-2ugf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-8.yml 38.3.0
2026-04-11T22:01:11.801416+00:00 GitLab Importer Affected by VCID-ehzg-bzrd-kbcc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-7.yml 38.3.0
2026-04-11T22:01:11.119829+00:00 GitLab Importer Affected by VCID-rdrs-mhaw-b3ge https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-3.yml 38.3.0
2026-04-11T22:01:10.881890+00:00 GitLab Importer Affected by VCID-n78p-x7hh-gqcf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-5.yml 38.3.0
2026-04-11T22:01:10.148078+00:00 GitLab Importer Affected by VCID-tw1y-t4qj-j3d1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-2.yml 38.3.0
2026-04-11T22:01:08.630998+00:00 GitLab Importer Affected by VCID-zspb-bd6j-wyd2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-4.yml 38.3.0
2026-04-11T22:01:07.412642+00:00 GitLab Importer Affected by VCID-bnne-7p2q-eqd2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-6.yml 38.3.0
2026-04-11T22:00:58.686176+00:00 GitLab Importer Affected by VCID-qb4j-9tz7-m7a2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2018-17960.yml 38.3.0
2026-04-11T21:58:27.834025+00:00 GitLab Importer Affected by VCID-3gg5-1921-rbfs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2018-14041.yml 38.3.0
2026-04-11T21:57:04.230488+00:00 GitLab Importer Affected by VCID-28bf-jvah-zkhw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-07-12-1.yml 38.3.0
2026-04-11T21:57:00.812936+00:00 GitLab Importer Affected by VCID-wkm6-cgc8-bfa8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-07-12-3.yml 38.3.0
2026-04-11T21:57:00.615968+00:00 GitLab Importer Affected by VCID-sr3p-pdxy-4yhu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-07-12-2.yml 38.3.0
2026-04-11T21:56:57.915974+00:00 GitLab Importer Affected by VCID-9jj4-ec9n-qbhs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-07-12-4.yml 38.3.0
2026-04-05T02:30:37.923164+00:00 GitLab Importer Affected by VCID-t1n7-eswt-73gw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-23503.yml 38.1.0
2026-04-05T02:30:32.086792+00:00 GitLab Importer Affected by VCID-zdq2-dhb2-6kaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-23501.yml 38.1.0
2026-04-05T02:21:45.770826+00:00 GitLab Importer Affected by VCID-b6er-h7dm-3bev https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GMS-2022-4096.yml 38.1.0
2026-04-03T00:25:24.882187+00:00 GitLab Importer Affected by VCID-pss5-as4b-cyf2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-xmgr-jff3-fcfv.yml 38.1.0
2026-04-03T00:25:24.515059+00:00 GitLab Importer Affected by VCID-hhmn-yz5p-xkap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-4ppr-jw47-9qm5.yml 38.1.0
2026-04-03T00:25:24.212851+00:00 GitLab Importer Affected by VCID-pmzz-9rws-4ud5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-x428-565f-8xj2.yml 38.1.0
2026-04-03T00:25:23.694176+00:00 GitLab Importer Affected by VCID-6xmj-wbea-r7ex https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-29m4-mx89-3mjg.yml 38.1.0
2026-04-03T00:25:23.396416+00:00 GitLab Importer Affected by VCID-s53a-f91p-huf4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-82vp-jr39-4j2j.yml 38.1.0
2026-04-03T00:25:23.047589+00:00 GitLab Importer Affected by VCID-swnc-ke6h-ekew https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-6xwf-7rfm-4gwc.yml 38.1.0
2026-04-03T00:25:22.156459+00:00 GitLab Importer Affected by VCID-9zqs-hjay-fkev https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-22q7-cg4r-p9mx.yml 38.1.0
2026-04-03T00:25:21.650197+00:00 GitLab Importer Affected by VCID-12y5-7b81-wkfu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-x4rj-f7m6-42c3.yml 38.1.0
2026-04-03T00:25:21.393457+00:00 GitLab Importer Affected by VCID-5z59-dn7p-xbc5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-g4c9-qfvw-fmr4.yml 38.1.0
2026-04-03T00:25:20.840454+00:00 GitLab Importer Affected by VCID-21e8-x7mp-hugk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-f9hr-7cfq-mjg2.yml 38.1.0
2026-04-03T00:25:20.639093+00:00 GitLab Importer Affected by VCID-5mxm-88r9-hfey https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-9rx9-7fmh-gj3g.yml 38.1.0
2026-04-03T00:25:20.217798+00:00 GitLab Importer Affected by VCID-b81w-n2ne-z3ee https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-hjx5-v9xg-7h25.yml 38.1.0
2026-04-03T00:25:19.917247+00:00 GitLab Importer Affected by VCID-9x6r-56xm-n7h7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-rv8r-8mh5-5376.yml 38.1.0
2026-04-03T00:25:19.708539+00:00 GitLab Importer Affected by VCID-ayw6-8pn4-17eb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-96jg-pmc4-cx39.yml 38.1.0
2026-04-03T00:25:18.022058+00:00 GitLab Importer Affected by VCID-mh4f-vtfj-hbb1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-4459-qrcc-vfcf.yml 38.1.0
2026-04-03T00:25:17.748033+00:00 GitLab Importer Affected by VCID-f4bv-pzdy-dfcb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-p2h4-7fp3-cmh8.yml 38.1.0
2026-04-03T00:25:17.488641+00:00 GitLab Importer Affected by VCID-rwqs-3ktq-qqbd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-8c25-vj2w-p72j.yml 38.1.0
2026-04-03T00:25:14.771933+00:00 GitLab Importer Affected by VCID-zw9b-6vkf-3fc6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-45wj-jv2h-jwrf.yml 38.1.0
2026-04-03T00:25:14.421163+00:00 GitLab Importer Affected by VCID-5u4q-m66t-wqcj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-95qm-3xp7-vfj5.yml 38.1.0
2026-04-03T00:25:14.202616+00:00 GitLab Importer Affected by VCID-ebpa-58em-wqam https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-cc97-g92w-jm65.yml 38.1.0
2026-04-03T00:25:13.496735+00:00 GitLab Importer Affected by VCID-e268-wagv-sbex https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-wg8h-gxf4-g4gh.yml 38.1.0
2026-04-03T00:25:13.164646+00:00 GitLab Importer Affected by VCID-tnjd-pyys-akav https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-5h5v-m596-r6rf.yml 38.1.0
2026-04-03T00:25:12.316916+00:00 GitLab Importer Affected by VCID-a563-vtwa-hkbr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-66c2-7g4p-wx4p.yml 38.1.0
2026-04-03T00:25:11.834427+00:00 GitLab Importer Affected by VCID-d99v-v9cj-zfh2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-rxc9-f2x6-qh4w.yml 38.1.0
2026-04-03T00:25:11.576143+00:00 GitLab Importer Affected by VCID-n1cb-8py6-bbhu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/GHSA-ppvg-hw62-6ph9.yml 38.1.0
2026-04-03T00:15:23.426209+00:00 GitLab Importer Affected by VCID-axvk-13qf-tka7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2024-22188.yml 38.1.0
2026-04-03T00:15:22.615040+00:00 GitLab Importer Affected by VCID-n7ng-zkkb-2qaz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2024-25120.yml 38.1.0
2026-04-03T00:15:21.377815+00:00 GitLab Importer Affected by VCID-taj6-zj2n-5kg8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2024-25121.yml 38.1.0
2026-04-03T00:15:20.350002+00:00 GitLab Importer Affected by VCID-g4uc-qeb6-myed https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2024-25119.yml 38.1.0
2026-04-03T00:15:19.286139+00:00 GitLab Importer Affected by VCID-gv1b-xtv4-4yg3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2024-25118.yml 38.1.0
2026-04-03T00:05:52.404227+00:00 GitLab Importer Affected by VCID-h6y3-7gsq-skh2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2023-47127.yml 38.1.0
2026-04-02T23:43:27.615639+00:00 GitLab Importer Affected by VCID-vyvy-y3cw-hbgr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2023-24814.yml 38.1.0
2026-04-02T23:31:29.155553+00:00 GitLab Importer Affected by VCID-mnz3-rj21-67ad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-36105.yml 38.1.0
2026-04-02T23:31:27.701960+00:00 GitLab Importer Affected by VCID-5paq-5frf-43ed https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-36107.yml 38.1.0
2026-04-02T23:27:02.899455+00:00 GitLab Importer Affected by VCID-4jpa-6fqh-hbfg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-31048.yml 38.1.0
2026-04-02T23:27:02.327971+00:00 GitLab Importer Affected by VCID-s55j-8hbt-akhn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-31046.yml 38.1.0
2026-04-02T23:26:48.085989+00:00 GitLab Importer Affected by VCID-bajy-qbwq-fufn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-31047.yml 38.1.0
2026-04-02T23:24:24.312756+00:00 GitLab Importer Affected by VCID-3n2r-awja-dug9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-19850.yml 38.1.0
2026-04-02T23:22:43.471202+00:00 GitLab Importer Affected by VCID-zkea-ge1t-z7gn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-12748.yml 38.1.0
2026-04-02T23:22:39.325945+00:00 GitLab Importer Affected by VCID-9g62-zd1x-3bdg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-12747.yml 38.1.0
2026-04-02T23:21:34.879183+00:00 GitLab Importer Affected by VCID-gcnj-6qb6-pbgz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-19848.yml 38.1.0
2026-04-02T23:20:09.847352+00:00 GitLab Importer Affected by VCID-xa4m-xpa9-v7h8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-19849.yml 38.1.0
2026-04-02T22:51:34.492419+00:00 GitLab Importer Affected by VCID-y32z-2d3f-gkgw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32768.yml 38.1.0
2026-04-02T22:51:06.933320+00:00 GitLab Importer Affected by VCID-n15v-ta9h-6ffb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32767.yml 38.1.0
2026-04-02T22:51:04.684431+00:00 GitLab Importer Affected by VCID-s64f-x81f-b7ce https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32668.yml 38.1.0
2026-04-02T22:51:03.699087+00:00 GitLab Importer Affected by VCID-ekfd-wp8z-d7e1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32669.yml 38.1.0
2026-04-02T22:43:05.050231+00:00 GitLab Importer Affected by VCID-xh7y-56vy-5ud8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21355.yml 38.1.0
2026-04-02T22:43:03.692778+00:00 GitLab Importer Affected by VCID-dsu7-jjjq-f3e1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21339.yml 38.1.0
2026-04-02T22:43:02.863181+00:00 GitLab Importer Affected by VCID-he5m-6wj4-rbhc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21357.yml 38.1.0
2026-04-02T22:43:01.492726+00:00 GitLab Importer Affected by VCID-5jgb-dsyx-hyb4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21338.yml 38.1.0
2026-04-02T22:42:58.516648+00:00 GitLab Importer Affected by VCID-t3jn-vwbx-u7cr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21370.yml 38.1.0
2026-04-02T22:38:15.118319+00:00 GitLab Importer Affected by VCID-f963-qur3-2qb7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2020-26227.yml 38.1.0
2026-04-02T22:19:32.653786+00:00 GitLab Importer Affected by VCID-2meq-x4kd-bbdn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-5.yml 38.1.0
2026-04-02T22:19:32.057549+00:00 GitLab Importer Affected by VCID-cm14-t8uv-k3es https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-3.yml 38.1.0
2026-04-02T22:19:29.529859+00:00 GitLab Importer Affected by VCID-3v4n-fzxa-bfaw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-4.yml 38.1.0
2026-04-02T22:19:28.589284+00:00 GitLab Importer Affected by VCID-stzu-sxe6-5yf5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-1.yml 38.1.0
2026-04-02T22:19:27.961667+00:00 GitLab Importer Affected by VCID-vxry-uvph-kbfd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-2.yml 38.1.0
2026-04-02T22:18:03.788168+00:00 GitLab Importer Affected by VCID-9gpp-ez8w-rqav https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-05-07-1.yml 38.1.0
2026-04-02T22:18:01.586965+00:00 GitLab Importer Affected by VCID-q8hy-wjd9-nbgp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-05-07-3.yml 38.1.0
2026-04-02T22:18:00.966753+00:00 GitLab Importer Affected by VCID-eajg-ctpd-2bby https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-05-07-2.yml 38.1.0
2026-04-02T22:15:11.525540+00:00 GitLab Importer Affected by VCID-j77k-hjgx-5kc5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-3.yml 38.1.0
2026-04-02T22:15:10.864715+00:00 GitLab Importer Affected by VCID-px44-19tj-h7aa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-6.yml 38.1.0
2026-04-02T22:15:10.648459+00:00 GitLab Importer Affected by VCID-axaf-45kr-kbfe https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-2.yml 38.1.0
2026-04-02T22:15:09.833849+00:00 GitLab Importer Affected by VCID-dj88-f3p8-cfbn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-7.yml 38.1.0
2026-04-02T22:15:08.426145+00:00 GitLab Importer Affected by VCID-wea9-egep-h7g5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-1.yml 38.1.0
2026-04-02T22:15:07.889679+00:00 GitLab Importer Affected by VCID-551q-gpyd-ffe8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-4.yml 38.1.0
2026-04-02T22:15:07.065977+00:00 GitLab Importer Affected by VCID-k8af-cg9k-87a9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-5.yml 38.1.0
2026-04-02T22:14:15.101161+00:00 GitLab Importer Affected by VCID-dm97-51uu-r7gw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-1.yml 38.1.0
2026-04-02T22:14:14.896662+00:00 GitLab Importer Affected by VCID-4btk-jt5n-2ugf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-8.yml 38.1.0
2026-04-02T22:14:14.719039+00:00 GitLab Importer Affected by VCID-ehzg-bzrd-kbcc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-7.yml 38.1.0
2026-04-02T22:14:14.096537+00:00 GitLab Importer Affected by VCID-rdrs-mhaw-b3ge https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-3.yml 38.1.0
2026-04-02T22:14:13.884186+00:00 GitLab Importer Affected by VCID-n78p-x7hh-gqcf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-5.yml 38.1.0
2026-04-02T22:14:13.221313+00:00 GitLab Importer Affected by VCID-tw1y-t4qj-j3d1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-2.yml 38.1.0
2026-04-02T22:14:11.812910+00:00 GitLab Importer Affected by VCID-zspb-bd6j-wyd2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-4.yml 38.1.0
2026-04-02T22:14:10.707426+00:00 GitLab Importer Affected by VCID-bnne-7p2q-eqd2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-6.yml 38.1.0
2026-04-02T22:14:01.054952+00:00 GitLab Importer Affected by VCID-qb4j-9tz7-m7a2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2018-17960.yml 38.1.0
2026-04-02T22:11:47.258284+00:00 GitLab Importer Affected by VCID-3gg5-1921-rbfs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2018-14041.yml 38.1.0
2026-04-02T22:10:27.467788+00:00 GitLab Importer Affected by VCID-28bf-jvah-zkhw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-07-12-1.yml 38.1.0
2026-04-02T22:10:24.321486+00:00 GitLab Importer Affected by VCID-wkm6-cgc8-bfa8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-07-12-3.yml 38.1.0
2026-04-02T22:10:24.154697+00:00 GitLab Importer Affected by VCID-sr3p-pdxy-4yhu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-07-12-2.yml 38.1.0
2026-04-02T22:10:21.572566+00:00 GitLab Importer Affected by VCID-9jj4-ec9n-qbhs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-07-12-4.yml 38.1.0
2026-04-01T18:06:21.064494+00:00 GitLab Importer Affected by VCID-vyvy-y3cw-hbgr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2023-24814.yml 38.0.0
2026-04-01T17:53:07.739410+00:00 GitLab Importer Affected by VCID-mnz3-rj21-67ad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-36105.yml 38.0.0
2026-04-01T17:53:06.148112+00:00 GitLab Importer Affected by VCID-5paq-5frf-43ed https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-36107.yml 38.0.0
2026-04-01T17:47:58.662144+00:00 GitLab Importer Affected by VCID-4jpa-6fqh-hbfg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-31048.yml 38.0.0
2026-04-01T17:47:58.054227+00:00 GitLab Importer Affected by VCID-s55j-8hbt-akhn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-31046.yml 38.0.0
2026-04-01T17:47:42.422736+00:00 GitLab Importer Affected by VCID-bajy-qbwq-fufn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2022-31047.yml 38.0.0
2026-04-01T17:45:15.664670+00:00 GitLab Importer Affected by VCID-3n2r-awja-dug9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-19850.yml 38.0.0
2026-04-01T17:43:46.149726+00:00 GitLab Importer Affected by VCID-zkea-ge1t-z7gn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-12748.yml 38.0.0
2026-04-01T17:43:40.231601+00:00 GitLab Importer Affected by VCID-9g62-zd1x-3bdg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-12747.yml 38.0.0
2026-04-01T17:42:25.060911+00:00 GitLab Importer Affected by VCID-gcnj-6qb6-pbgz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-19848.yml 38.0.0
2026-04-01T17:40:44.857074+00:00 GitLab Importer Affected by VCID-xa4m-xpa9-v7h8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2019-19849.yml 38.0.0
2026-04-01T17:09:39.648884+00:00 GitLab Importer Affected by VCID-y32z-2d3f-gkgw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32768.yml 38.0.0
2026-04-01T17:09:09.431374+00:00 GitLab Importer Affected by VCID-n15v-ta9h-6ffb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32767.yml 38.0.0
2026-04-01T17:09:06.945914+00:00 GitLab Importer Affected by VCID-s64f-x81f-b7ce https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32668.yml 38.0.0
2026-04-01T17:09:05.837594+00:00 GitLab Importer Affected by VCID-ekfd-wp8z-d7e1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32669.yml 38.0.0
2026-04-01T17:00:47.607874+00:00 GitLab Importer Affected by VCID-xh7y-56vy-5ud8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21355.yml 38.0.0
2026-04-01T17:00:46.178695+00:00 GitLab Importer Affected by VCID-dsu7-jjjq-f3e1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21339.yml 38.0.0
2026-04-01T17:00:45.275829+00:00 GitLab Importer Affected by VCID-he5m-6wj4-rbhc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21357.yml 38.0.0
2026-04-01T17:00:43.834847+00:00 GitLab Importer Affected by VCID-5jgb-dsyx-hyb4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21338.yml 38.0.0
2026-04-01T17:00:40.576763+00:00 GitLab Importer Affected by VCID-t3jn-vwbx-u7cr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21370.yml 38.0.0
2026-04-01T16:55:40.835047+00:00 GitLab Importer Affected by VCID-f963-qur3-2qb7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2020-26227.yml 38.0.0
2026-04-01T16:37:18.175568+00:00 GitLab Importer Affected by VCID-2meq-x4kd-bbdn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-5.yml 38.0.0
2026-04-01T16:37:17.515264+00:00 GitLab Importer Affected by VCID-cm14-t8uv-k3es https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-3.yml 38.0.0
2026-04-01T16:37:16.858933+00:00 GitLab Importer Affected by VCID-3v4n-fzxa-bfaw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-4.yml 38.0.0
2026-04-01T16:37:15.839410+00:00 GitLab Importer Affected by VCID-stzu-sxe6-5yf5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-1.yml 38.0.0
2026-04-01T16:37:15.185555+00:00 GitLab Importer Affected by VCID-vxry-uvph-kbfd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-06-25-2.yml 38.0.0
2026-04-01T16:35:44.539085+00:00 GitLab Importer Affected by VCID-9gpp-ez8w-rqav https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-05-07-1.yml 38.0.0
2026-04-01T16:35:42.114307+00:00 GitLab Importer Affected by VCID-q8hy-wjd9-nbgp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-05-07-3.yml 38.0.0
2026-04-01T16:35:41.473804+00:00 GitLab Importer Affected by VCID-eajg-ctpd-2bby https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-05-07-2.yml 38.0.0
2026-04-01T16:32:44.669729+00:00 GitLab Importer Affected by VCID-j77k-hjgx-5kc5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-3.yml 38.0.0
2026-04-01T16:32:43.954785+00:00 GitLab Importer Affected by VCID-px44-19tj-h7aa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-6.yml 38.0.0
2026-04-01T16:32:43.726831+00:00 GitLab Importer Affected by VCID-axaf-45kr-kbfe https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-2.yml 38.0.0
2026-04-01T16:32:42.881998+00:00 GitLab Importer Affected by VCID-dj88-f3p8-cfbn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-7.yml 38.0.0
2026-04-01T16:32:41.389492+00:00 GitLab Importer Affected by VCID-wea9-egep-h7g5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-1.yml 38.0.0
2026-04-01T16:32:40.819950+00:00 GitLab Importer Affected by VCID-551q-gpyd-ffe8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-4.yml 38.0.0
2026-04-01T16:32:39.956507+00:00 GitLab Importer Affected by VCID-k8af-cg9k-87a9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2019-01-22-5.yml 38.0.0
2026-04-01T16:31:44.548642+00:00 GitLab Importer Affected by VCID-dm97-51uu-r7gw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-1.yml 38.0.0
2026-04-01T16:31:44.323866+00:00 GitLab Importer Affected by VCID-4btk-jt5n-2ugf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-8.yml 38.0.0
2026-04-01T16:31:44.142294+00:00 GitLab Importer Affected by VCID-ehzg-bzrd-kbcc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-7.yml 38.0.0
2026-04-01T16:31:43.483657+00:00 GitLab Importer Affected by VCID-rdrs-mhaw-b3ge https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-3.yml 38.0.0
2026-04-01T16:31:43.268357+00:00 GitLab Importer Affected by VCID-n78p-x7hh-gqcf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-5.yml 38.0.0
2026-04-01T16:31:42.555522+00:00 GitLab Importer Affected by VCID-tw1y-t4qj-j3d1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-2.yml 38.0.0
2026-04-01T16:31:41.082988+00:00 GitLab Importer Affected by VCID-zspb-bd6j-wyd2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-4.yml 38.0.0
2026-04-01T16:31:39.898608+00:00 GitLab Importer Affected by VCID-bnne-7p2q-eqd2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-12-11-6.yml 38.0.0
2026-04-01T16:31:31.344923+00:00 GitLab Importer Affected by VCID-qb4j-9tz7-m7a2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2018-17960.yml 38.0.0
2026-04-01T16:29:09.077187+00:00 GitLab Importer Affected by VCID-3gg5-1921-rbfs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2018-14041.yml 38.0.0
2026-04-01T16:27:47.328263+00:00 GitLab Importer Affected by VCID-28bf-jvah-zkhw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-07-12-1.yml 38.0.0
2026-04-01T16:27:44.052131+00:00 GitLab Importer Affected by VCID-wkm6-cgc8-bfa8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-07-12-3.yml 38.0.0
2026-04-01T16:27:43.878356+00:00 GitLab Importer Affected by VCID-sr3p-pdxy-4yhu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-07-12-2.yml 38.0.0
2026-04-01T16:27:41.324318+00:00 GitLab Importer Affected by VCID-9jj4-ec9n-qbhs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/2018-07-12-4.yml 38.0.0