Skip to content
RequestGuard Vulnerabilities
Pricing
Vulnerability intelligence Composer

typo3/cms-recycler

TYPO3 CMS Recycler - Restore deleted records or remove them from the database permanently.

Composer latest 13.4.35 GPL-2.0-or-later

Evidence path

Version, exploitation, severity

RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.

1

Latest version

13.4.35

No matching published advisory returned

2

Known exploitation

No KEV match

Checked by exact CVE identifier

3

Highest advisory severity

High

3 active advisories

Check an exact version

The registry confirms the version, then OSV checks advisories for that exact value.

Published records

Advisories

3
GHSA-p52w-7rhw-9m67 high

TYPO3 CMS Allows Broken Access Control in Recycler Module

Affected range

ECOSYSTEM: introduced 14.0.0; fixed 14.0.2ECOSYSTEM: introduced 13.0.0; fixed 13.4.23ECOSYSTEM: introduced 12.0.0; fixed 12.4.41ECOSYSTEM: introduced 11.0.0; fixed 11.5.49ECOSYSTEM: introduced 10.0.0; fixed 10.4.55

Fixed versions: 14.0.2, 13.4.23, 12.4.41, 11.5.49, 10.4.55

CVE-2025-59022 Source ↗Source ↗
GHSA-f34x-rx2w-7pm3 moderate

TYPO3 CMS has Broken Access Control in the Recycler Module

Affected range

ECOSYSTEM: introduced 0; fixed 10.4.57ECOSYSTEM: introduced 11.0.0; fixed 11.5.51ECOSYSTEM: introduced 12.0.0; fixed 12.4.46ECOSYSTEM: introduced 13.0.0; fixed 13.4.31ECOSYSTEM: introduced 14.0.0; fixed 14.3.3

Fixed versions: 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3

CVE-2026-47349 Source ↗Source ↗
GHSA-2fhw-2j7m-mr4m moderate

TYPO3 backend modules have Broken Access Control

Affected range

ECOSYSTEM: introduced 9.0.0; fixed 12.4.37ECOSYSTEM: introduced 10.0.0; fixed 12.4.37ECOSYSTEM: introduced 11.0.0; fixed 12.4.37ECOSYSTEM: introduced 12.0.0; fixed 12.4.37ECOSYSTEM: introduced 13.0.0; fixed 13.4.18

Fixed versions: 12.4.37, 13.4.18

CVE-2025-59017 Source ↗Source ↗