Packagist/friendsoftypo3/tt-address CVE-2026-8827: high, EPSS 0.39%
TYPO3 SQL Injection in extension "Address List" (tt_address)
Action: Upgrade friendsoftypo3/tt-address to 8.1.2 or later.
composer require friendsoftypo3/tt-address:10.0.1composer require friendsoftypo3/tt-address:9.1.1composer require friendsoftypo3/tt-address:8.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.0.0 | 10.0.1 | - |
| 9.0.0 | 9.1.1 | - |
| 0 | 8.1.2 | - |
Fixed versions
| 10.0.1 | 9.1.1 | 8.1.2 |
Sources
- osv: GHSA-3h52-6v6j-6wwv
- https://nvd.nist.gov/vuln/detail/CVE-2026-8827
- https://github.com/FriendsOfPHP/security-advisories/blob/master/friendsoftypo3/tt-address/CVE-2026-8827.yaml
- https://github.com/FriendsOfTYPO3/tt_address
- https://typo3.org/security/advisory/typo3-ext-sa-2026-012
CVE-2026-8827 · published · modified · JSON