TYPO3 13.4.27—What’s Changed?

Released: March 10, 2026
Update type: Bugfix and maintenance release

TYPO3 13.4.27 is a maintenance release focusing on stability and bug fixes across the core. Key improvements include fixes for the form editor, file handling, CSP headers, and various backend components. This release also updates CKEditor 5 to v47.6 and resolves several edge-case issues in the recycler, page browser, and DataHandler.

Security Fixes

No security fixes in this release.

Editing & UX Improvements

  • Form editor stability — Fixed crash when editing forms in multiple browser tabs simultaneously.
  • CKEditor upgrade — Updated CKEditor 5 to version 47.6 for improved editing experience.
  • Page browser fixes — Corrected linkable node property checks and preselection behavior in the page tree component.
  • Core icon caching — Ensured core icons do not become stale due to browser cache issues.

Backend & Administration

  • Recycler improvements — Fixed pagination with multiple record types, preserved filter selection when hard-deleting records, and improved username caching.
  • MFA lockout messaging — Improved wording for non-temporary multi-factor authentication lockout messages.
  • Environment status report — Enabled EnvironmentStatusReport for CLI usage.
  • FormEngine labels — Added missing labels in FormEngine for better localization support.

Technical Changes

  • CSP header handling — Applied Content Security Policy headers to default error responses and fixed importmap issues with script-src-elem configuration.
  • File handling fixes — Resolved TypeError in FilesProcessor for non-recursive operations, open_basedir warnings for thumbnails, and missing sys_file_reference handling in ExtendedFileUtility.
  • Form persistence — Allowed SaveToDatabaseFinisher to persist data to non-uid tables and prevented InsufficientFolderAccessPermissionsException in form preview.
  • DataHandler improvements — Added proper type casting, preserved defVals through record_edit redirect cycles, and fixed strict mode support for CType menu_categorized.
  • Cache-control headers — Fixed duplicate cache-control header issues.
  • Extbase argument handling — Fixed merging of file uploads in Extbase arguments.