VulnerableCode Package Details - pkg:composer/typo3/cms-form@12.4.6

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:composer/typo3/cms-form@12.4.6

Essentials

purl	pkg:composer/typo3/cms-form@12.4.6

Next non-vulnerable version	13.4.31
Latest non-vulnerable version	14.3.5
Risk score	3.4

Vulnerabilities affecting this package (4)

Advisory	Summary	Fixed in package version
GHSA-hwvq-2w67-rvxp Aliases: CVE-2026-47346	TYPO3 CMS has Broken Access Control in its Form Framework ### Problem Backend users with file write permissions were able …	There are no reported fixed by versions.
GHSA-pjpj-v387-x4vq Aliases: CVE-2026-11607	TYPO3 CMS has Broken Access Control in its Form Framework ### Problem Backend users with access to the Form Framework …	There are no reported fixed by versions.
CVE-2024-55922 Aliases: GHSA-ww7h-g2qf-7xv6	TYPO3 Form Framework Module vulnerable to Cross-Site Request Forgery ### Problem A vulnerability has been identified in the backend user …	12.4.25 Vulnerable 13.4.3 Vulnerable 12.4.25 Vulnerable 13.4.3 Vulnerable
GHSA-ww7h-g2qf-7xv6 Aliases: CVE-2024-55922	TYPO3 Form Framework Module vulnerable to Cross-Site Request Forgery ### Problem A vulnerability has been identified in the backend user …	12.4.25 Vulnerable 13.4.3 Vulnerable 12.4.25 Vulnerable

This package is not known to fix any advisories.