[HIGH] TYPO3 CMS has Broken Access Control in its Form Framework

PKSA-8hzt-dvj5-mc5s CVE-2026-11607 GHSA-pjpj-v387-x4vq

Affected package: typo3/cms-form

Affected version: >=14.0.0,<14.3.3|>=13.0.0,<13.4.31|>=12.0.0,<12.4.46|>=11.0.0,<11.5.51|<10.4.57

Reported by:
GitHub