8000 Pull requests · DominicBreuker/typo3 · GitHub < 7FFF link rel="modulepreload" href="https://github.githubassets.com/assets/2c-09f261abcf12202b.js" crossorigin="anonymous" />

Repository navigation

All pull requests

Labels (9)Milestones (0)New pull request

Fix server-side template injection in AbstractFinisher::parseOption()
#7DominicBreuker with CopilotAI opened Feb 8, 2026
[SECURITY] Fix SSTI via double evaluation in form finisher parseOption
#6DominicBreuker with CopilotAI opened Feb 8, 2026
Fix local file inclusion in FileDownloadController via fallback storage bypass
#5DominicBreuker with CopilotAI opened Feb 7, 2026
[WIP] Fix critical vulnerability with HMAC handling
#4DominicBreuker with CopilotAI opened Feb 7, 2026
Remove password hash oracle from Install Tool login endpoint
#3DominicBreuker with CopilotAI opened Feb 7, 2026
Fix unrestricted unserialize() on user-controlled input (CWE-502)
#2DominicBreuker with CopilotAI opened Feb 7, 2026
Fix auth bypass: reject login when stored password hash is invalid
#1DominicBreuker with CopilotAI opened Feb 7, 2026

0