Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms@4.3.0-alpha1
purl pkg:composer/typo3/cms@4.3.0-alpha1
Tags Ghost
Next non-vulnerable version 10.4.35
Latest non-vulnerable version 12.2.0
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-acey-xzmu-7yg9
Aliases:
CVE-2009-0816
GHSA-jg55-3q6h-2ccf
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T16:00:37.420728+00:00 GHSA Importer Affected by VCID-acey-xzmu-7yg9 https://github.com/advisories/GHSA-jg55-3q6h-2ccf 38.0.0
2026-04-01T12:49:59.475765+00:00 GitLab Importer Affected by VCID-acey-xzmu-7yg9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms/CVE-2009-0816.yml 38.0.0