Flow Bugfix Releases for Entity Security

PKSA-mjrm-8hdb-yqsg

Affected version: >=3.0.0,<3.0.12|>=3.1.0,<3.1.10|>=3.2.0,<3.2.13|>=3.3.0,<3.3.13|>=4.0.0,<4.0.6

Reported by:
FriendsOfPHP/security-advisories

Time-Based Information Disclosure Vulnerability in Flow

PKSA-bwbr-qnv1-v2ws

Affected version: >=2.3.0,<2.3.16|>=3.0.0,<3.0.10|>=3.1.0,<3.1.7|>=3.2.0,<3.2.7|>=3.3.0,<3.3.5

Reported by:
FriendsOfPHP/security-advisories

Arbitrary file upload and XML External Entity processing

PKSA-5wgs-7sf8-8pnf

Affected version: >=2.3.0,<2.3.7|>=3.0.0,<3.0.1

Reported by:
FriendsOfPHP/security-advisories

[MEDIUM] Cross-Site Scripting in TYPO3 Flow

PKSA-yfjv-513f-rbzy CVE-2013-7082 GHSA-vc74-c4m6-9979

Affected version: >=1.1.0,<1.1.1|>=2.0.0,<2.0.1

Reported by:
GitHub, FriendsOfPHP/security-advisories

Insecure Unserialize Vulnerability in FLOW3

PKSA-k668-wp2w-19w3

Affected version: >=1.0.0,<1.0.4

Reported by:
FriendsOfPHP/security-advisories