Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms@4.3.0-beta1
purl pkg:composer/typo3/cms@4.3.0-beta1
Tags Ghost
Next non-vulnerable version 10.4.35
Latest non-vulnerable version 12.2.0
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-u1y7-xzfg-z7ce
Aliases:
CVE-2009-3635
GHSA-hwrc-w5gg-f335
TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain access by using only the password's md5 hash as a credential.
4.3.0-beta2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T16:00:39.836381+00:00 GHSA Importer Affected by VCID-u1y7-xzfg-z7ce https://github.com/advisories/GHSA-hwrc-w5gg-f335 38.0.0
2026-04-01T12:50:00.819721+00:00 GitLab Importer Affected by VCID-u1y7-xzfg-z7ce https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms/CVE-2009-3635.yml 38.0.0