VulnerableCode Package Details - pkg:composer/typo3/cms-form@14.3.2

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:composer/typo3/cms-form@14.3.2

Essentials

purl	pkg:composer/typo3/cms-form@14.3.2

Next non-vulnerable version	14.3.5
Latest non-vulnerable version	14.3.5
Risk score	3.9

Vulnerabilities affecting this package (5)

Advisory	Summary	Fixed in package version
GHSA-hwvq-2w67-rvxp Aliases: CVE-2026-47346	TYPO3 CMS has Broken Access Control in its Form Framework ### Problem Backend users with file write permissions were able …	14.3.3 Vulnerable
GHSA-pjpj-v387-x4vq Aliases: CVE-2026-11607	TYPO3 CMS has Broken Access Control in its Form Framework ### Problem Backend users with access to the Form Framework …	14.3.3 Vulnerable
GHSA-jh32-v29g-68pq Aliases: CVE-2026-49741	TYPO3 CMS has Privilege Escalation & SQL Injection in its Form Framework ### Problem Backend users with write access to …	14.3.3 Vulnerable
GHSA-p8pr-442q-qf8g	Duplicate Advisory: TYPO3-CORE-SA-2026-020: TYPO3 CMS - Unrestricted File Upload in Form Framework ## Duplicate Advisory This advisory has been withdrawn …	14.3.5 Not vulnerable
GHSA-mfqj-cqv3-h7xw Aliases: CVE-2026-15305	TYPO3 CMS - Unrestricted File Upload in Form Framework ### Problem Users were able to upload files with arbitrary MIME …	14.3.5 Not vulnerable 14.3.5 Not vulnerable

This package is not known to fix any advisories.