Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/flow@3.3.2
purl pkg:composer/typo3/flow@3.3.2
Next non-vulnerable version 3.3.5
Latest non-vulnerable version 4.0.6
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-k789-czme-uygu
Aliases:
Flow-SA-2016-001
Time-Based Information Disclosure Vulnerability The `PersistedUsernamePasswordProvider` is prone to a information disclosure of account existence based on timing attacks as the hashing of passwords is only done in case an account is found.
3.3.5
Affected by 0 other vulnerabilities.
VCID-rzs7-k8qe-ayea
Aliases:
GMS-2016-159
Information Exposure Through Timing Discrepancy Time-Based Information Disclosure Vulnerability in Flow.
3.3.5
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T20:06:33.471564+00:00 GitLab Importer Affected by VCID-rzs7-k8qe-ayea https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/flow/GMS-2016-159.yml 38.6.0
2026-06-04T20:06:33.273896+00:00 GitLab Importer Affected by VCID-k789-czme-uygu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/flow/Flow-SA-2016-001.yml 38.6.0