Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/flow@3.3.3
purl pkg:composer/typo3/flow@3.3.3
Next non-vulnerable version 3.3.5
Latest non-vulnerable version 4.0.6
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-hy8r-du1x-93cf
Aliases:
Flow-SA-2016-001
Time-Based Information Disclosure Vulnerability The `PersistedUsernamePasswordProvider` is prone to a information disclosure of account existence based on timing attacks as the hashing of passwords is only done in case an account is found.
3.3.5
Affected by 0 other vulnerabilities.
VCID-xc43-9az2-bbd2
Aliases:
GMS-2016-159
Information Exposure Through Timing Discrepancy Time-Based Information Disclosure Vulnerability in Flow.
3.3.5
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T09:36:22.577598+00:00 GitLab Importer Affected by VCID-xc43-9az2-bbd2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/flow/GMS-2016-159.yml 38.6.0
2026-05-31T09:36:22.347399+00:00 GitLab Importer Affected by VCID-hy8r-du1x-93cf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/flow/Flow-SA-2016-001.yml 38.6.0