[MEDIUM] TYPO3-EXT-SA-2026-011: XML External Entity Injection in extension "Faceted Search" (ke_search)

PKSA-cy57-p12b-t759 CVE-2026-46722 GHSA-fq39-62gx-8hqx

Affected version: >=7.0.0,<7.0.1|>=6.0.0,<6.6.1|>=5.0.0,<5.6.2|<4.6.7

Reported by:
GitHub, FriendsOfPHP/security-advisories

[MEDIUM] TYPO3-EXT-SA-2026-011: Path Traversal in extension "Faceted Search" (ke_search)

PKSA-pb46-78nq-81hw CVE-2026-46723 GHSA-67j3-jmm3-32xc

Affected version: >=7.0.0,<7.0.1|>=6.0.0,<6.6.1|<5.6.2

Reported by:
GitHub, FriendsOfPHP/security-advisories

[MEDIUM] TYPO3-EXT-SA-2026-011: Path Traversal in extension "Faceted Search" (ke_search)

PKSA-ybqg-nm5d-my8d CVE-2026-46724 GHSA-c72x-mc2p-wv7x

Affected version: >=7.0.0,<7.0.1|>=6.0.0,<6.6.1|>=5.0.0,<5.6.2|<4.6.7

Reported by:
GitHub, FriendsOfPHP/security-advisories

[MEDIUM] TYPO3-EXT-SA-2023-004: Cross-Site Scripting in extension "Faceted Search" (ke_search)

PKSA-9wpg-8xw4-8r31 CVE-2023-35783 GHSA-f4m6-x2xj-jc7w

Affected version: >=5.0.0,<5.0.2|>=4.6.0,<4.6.6|>=4.5.0,<4.6.0|>=4.4.0,<4.5.0|>=4.3.0,<4.4.0|>=4.2.0,<4.3.0|>=4.1.0,<4.2.0|<4.0.3

Reported by:
GitHub, FriendsOfPHP/security-advisories