The following matrix shows the versions that are currently maintained.
| Version | Supported |
|---|---|
| 2.x | ✅ |
| 1.5.x | ✅ |
| < 1.5.0 | ❌ |
Please report potential vulnerabilities to the TYPO3 Security Team either
- by reaching out to security@typo3.org, or
- by reporting a new vulnerability via GitHub
It is possible to send GPG/PGP encrypted emails to security@typo3.org using key id
C05FBE60 (complete fingerprint B41C C3EF 373E 0F5C 7018 7FE9 3BEF BD27 C05F BE60):
- download public key file from keys.openpgp.org
- download public key file from typo3.org
TYPO3 releases (including potential security fixes) are usually released on Tuesdays (except for holidays like Christmas or New Year's Day).
Maintenance releases for stable versions have been scheduled in advance - it is very likely that security fixes are released during these dates as well.