Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms-core@11.5.48
purl pkg:composer/typo3/cms-core@11.5.48
Tags Ghost
Next non-vulnerable version 13.4.34
Latest non-vulnerable version 14.3.6
Risk score 2.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-72jf-5fg5-3cw3
Aliases:
CVE-2025-59013
TYPO3 CMS has an open‑redirect vulnerability An open‑redirect vulnerability in GeneralUtility::sanitizeLocalUrl of TYPO3 CMS 9.0.0–9.5.54, 10.0.0–10.4.53, 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 …
12.4.37
Vulnerable
GHSA-cvm2-5f78-g9m8
Aliases:
CVE-2025-59016
TYPO3 CMS exposes sensitive information in an error message Error messages containing sensitive information in the File Abstraction Layer in …
12.4.37
Vulnerable
GHSA-7vp9-x248-9vr9
Aliases:
CVE-2026-0859
TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool ### Problem Local platform users who can write to TYPO3’s mail‑file … There are no reported fixed by versions.
This package is not known to fix any advisories.