https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-21T15:53:40.896375+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-112069 fkie_cve-2026-112069 2026-10-21T15:53:40.921456+00:00

The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is only exploitable when the extension is used on a website running TYPO3 14.3.

 https://db.gcve.eu/vuln/ghsa-fpwg-7c56-4vq5 GHSA-fpwg-7c56-4vq5 2026-10-21T15:53:40.921541+00:00

The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is only exploitable when the extension is used on a website running TYPO3 14.3.