Flow Bugfix Releases for Entity Security

PKSA-dvnf-qqkg-f9xr

Affected version: >=3.0.0,<3.0.12|>=3.1.0,<3.1.10|>=3.2.0,<3.2.13|>=3.3.0,<3.3.13|>=4.0.0,<4.0.6

Reported by:
FriendsOfPHP/security-advisories

Time-Based Information Disclosure Vulnerability in Flow

PKSA-bj7m-5wrd-5hnz

Affected version: >=2.3.0,<2.3.16|>=3.0.0,<3.0.10|>=3.1.0,<3.1.7|>=3.2.0,<3.2.7|>=3.3.0,<3.3.5

Reported by:
FriendsOfPHP/security-advisories

Arbitrary file upload and XML External Entity processing

PKSA-b6j6-98g6-jt8b

Affected version: >=2.3.0,<2.3.7|>=3.0.0,<3.0.1

Reported by:
FriendsOfPHP/security-advisories

[MEDIUM] Cross-Site Scripting in TYPO3 Flow

PKSA-f1h9-x441-fk8v CVE-2013-7082 GHSA-vc74-c4m6-9979

Affected version: >=1.1.0,<1.1.1|>=2.0.0,<2.0.1

Reported by:
GitHub, FriendsOfPHP/security-advisories

Insecure Unserialize Vulnerability in FLOW3

PKSA-zjqd-q7b5-qqyg

Affected version: >=1.0.0,<1.0.4

Reported by:
FriendsOfPHP/security-advisories