typo3/cms-form Security Advisories for v14.3.3 (2)
-
TYPO3-CORE-SA-2026-024: Security Misconfiguration in Form Framework
PKSA-fykt-pmbg-txnv CVE-2026-109162
Affected version: >=14.0.0,<14.3.9
Reported by:
FriendsOfPHP/security-advisories -
[MEDIUM] TYPO3-CORE-SA-2026-020: TYPO3 CMS - Unrestricted File Upload in Form Framework
PKSA-d4vj-m6hn-xm1j CVE-2026-15305 GHSA-mfqj-cqv3-h7xw
Affected version: >=14.2.0,<14.3.5
Reported by:
GitHub, FriendsOfPHP/security-advisories