CVE-2026-46721
1 advisory.
Packagist/evoweb/sf-register CVE-2026-46721: medium, EPSS 0.44%
TYPO3 sf_register extension allows unauthorized assignment of frontend user groups
Action: Upgrade evoweb/sf-register to 13.2.4 or later.
composer require evoweb/sf-register:14.0.2composer require evoweb/sf-register:13.2.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 14.0.0 | 14.0.2 | - |
| 0 | 13.2.4 | - |
Fixed versions
| 14.0.2 | 13.2.4 |
Sources
- osv: GHSA-v348-vr4q-fv9p
- https://nvd.nist.gov/vuln/detail/CVE-2026-46721
- https://github.com/FriendsOfPHP/security-advisories/blob/master/evoweb/sf-register/CVE-2026-46721.yaml
- https://github.com/evoWeb/sf_register
- https://typo3.org/security/advisory/typo3-ext-sa-2026-009
CVE-2026-46721 · published · modified · JSON