Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms-core@9.5.50
purl pkg:composer/typo3/cms-core@9.5.50
Tags Ghost
Next non-vulnerable version 13.4.34
Latest non-vulnerable version 14.3.6
Risk score 2.5
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-3jrg-97f3-rqh9
Aliases:
CVE-2025-47938
TYPO3 Unverified Password Change for Backend Users ### Problem The backend user management interface allows password changes without requiring the … There are no reported fixed by versions.
GHSA-9hq9-cr36-4wpj
Aliases:
CVE-2025-47939
TYPO3 Allows Unrestricted File Upload in File Abstraction Layer ### Problem By design, the file management module in TYPO3’s backend … There are no reported fixed by versions.
GHSA-x8pv-fgxp-8v3x
Aliases:
CVE-2025-47937
TYPO3 Allows Information Disclosure via DBAL Restriction Handling ### Problem When performing a database query involving multiple tables through the … There are no reported fixed by versions.
This package is not known to fix any advisories.