Skip directly to page content
b13 GmbH

Hauptstätter Str. 59
70178 Stuttgart
Germany +49 (0) 711 460 589 70 [email protected]

TYPO3 12.4.50—What’s Changed?

Released: October 9, 2026
Update type: Bugfix and maintenance release

TYPO3 12.4.50 is a maintenance release focused on security improvements and dependency updates. This release includes important XSS fixes backported from CKEditor 48.5.1 and updates several third-party libraries to address security vulnerabilities.

Security Fixes

  • CKEditor XSS fixes — Backported critical XSS security fixes from CKEditor v48.5.1 to protect against cross-site scripting vulnerabilities in the rich text editor.
  • Insecure Node dependencies updated — Updated insecure Node.js development dependencies to their latest secure versions.

Editing & UX Improvements

No editing or UX changes in this release.

Backend & Administration

No backend or administration changes in this release.

Technical Changes

  • SVG sanitizer updated — Updated enshrined/svg-sanitize library to version 1.0 for improved SVG security handling.
  • Guzzle HTTP client upgraded — Raised guzzlehttp/guzzle to version 7.15 for better HTTP request handling and security.
  • Composer updated — Raised composer/composer to version 2.10.3 or higher for improved dependency management.