Packagist/typo3/cms-core CVE-2020-26229: low 3.7, EPSS 0.64%

XML External Entity in Dashboard Widget

Action: Upgrade typo3/cms-core to 10.4.10 or later.

composer require typo3/cms-core:10.4.10

Affected

Fixed versions

Sources

• osv: GHSA-q9cp-mc96-m4w2
• https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-q9cp-mc96-m4w2
• https://nvd.nist.gov/vuln/detail/CVE-2020-26229
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2020-26229.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2020-26229.yaml
• https://typo3.org/security/advisory/typo3-core-sa-2020-012

CVE-2020-26229 · published 2020-11-23T21:18:44Z · modified 2026-07-08T06:27:23.991857684Z · JSON