Skip to content
RequestGuard Vulnerabilities
Pricing
Vulnerability intelligence Composer

typo3/cms-workspaces

TYPO3 CMS Workspaces - Workflows with custom stages and versioning for a better editing and publishing experience.

Composer latest 13.4.35 GPL-2.0-or-later

Evidence path

Version, exploitation, severity

RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.

1

Latest version

13.4.35

No matching published advisory returned

2

Known exploitation

No KEV match

Checked by exact CVE identifier

3

Highest advisory severity

High

2 active advisories

Check an exact version

The registry confirms the version, then OSV checks advisories for that exact value.

Published records

Advisories

2
GHSA-w2pf-7q5w-2cgw high

TYPO3 Workspaces Module Information Disclosure

Affected range

ECOSYSTEM: introduced 9.0.0; fixed 12.4.37ECOSYSTEM: introduced 10.0.0; fixed 12.4.37ECOSYSTEM: introduced 11.0.0; fixed 12.4.37ECOSYSTEM: introduced 12.0.0; fixed 12.4.37ECOSYSTEM: introduced 13.0.0; fixed 13.4.18

Fixed versions: 12.4.37, 13.4.18

CVE-2025-59018 Source ↗Source ↗
GHSA-2fhw-2j7m-mr4m moderate

TYPO3 backend modules have Broken Access Control

Affected range

ECOSYSTEM: introduced 9.0.0; fixed 12.4.37ECOSYSTEM: introduced 10.0.0; fixed 12.4.37ECOSYSTEM: introduced 11.0.0; fixed 12.4.37ECOSYSTEM: introduced 12.0.0; fixed 12.4.37ECOSYSTEM: introduced 13.0.0; fixed 13.4.18

Fixed versions: 12.4.37, 13.4.18

CVE-2025-59017 Source ↗Source ↗