---
title: "TYPO3 12.4.50—What’s Changed?"
url: "https://b13.com/release-digests/v12/typo3-12450-whats-changed"
date: 2026-10-09
modified: 2026-10-09
lastUpdated: 2026-10-09
---

# TYPO3 12.4.50—What’s Changed?

TYPO3 12.4.50—What’s Changed?
===============================

Released: October 9, 2026
Update type: Bugfix and maintenance release

TYPO3 12.4.50 is a maintenance release focused on security improvements and dependency updates. This release includes important XSS fixes backported from CKEditor 48.5.1 and updates several third-party libraries to address security vulnerabilities.

  Security Fixes
----------------

- **CKEditor XSS fixes** — Backported critical XSS security fixes from CKEditor v48.5.1 to protect against cross-site scripting vulnerabilities in the rich text editor.
- **Insecure Node dependencies updated** — Updated insecure Node.js development dependencies to their latest secure versions.

   Editing & UX Improvements
-------------------------------

No editing or UX changes in this release.

   Backend & Administration
------------------------------

No backend or administration changes in this release.

   Technical Changes
-------------------

- **SVG sanitizer updated** — Updated enshrined/svg-sanitize library to version 1.0 for improved SVG security handling.
- **Guzzle HTTP client upgraded** — Raised guzzlehttp/guzzle to version 7.15 for better HTTP request handling and security.
- **Composer updated** — Raised composer/composer to version 2.10.3 or higher for improved dependency management.

  - [Download TYPO3 12](https://get.typo3.org/version/12)
- [Official release announcement](https://news.typo3.com/article/typo3-10461-11555-and-12450-elts-released)
- [Full changelog](https://docs.typo3.org/c/typo3/cms-core/main/en-us/Changelog-12/Index.html)