Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

2 matching records.

1. 5
   CVE NVD 12d ago

   In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the…

   In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the OpenAI service directly from the browser. Any authenticated backend user can read…

   CVE-2026-113459 TYPO3 OpenAI Web platform
2. 5
   CVE NVD 12d ago

   The extension no longer applied its access protection to files in file storages that use a non-default relative base path.

   The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The…

   CVE-2026-112069 TYPO3 Web platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=TYPO3&limit=100. RSS for this section: feed.xml.