TYPO3-EXT-SA-2026-022: Server-Side Template Injection in extension "powermail" (powermail)

PKSA-dhfp-j236-nf9h CVE-2026-77136

Affected version: >=13.0.0,<13.2.1|>=11.0.0,<12.6.1|<10.9.3

Reported by:
FriendsOfPHP/security-advisories

[MEDIUM] Powermail TYPO3 extension Broken Access Control in the OutputController

PKSA-skk3-z6j6-54hc CVE-2024-45233 GHSA-9jqr-5x45-pgw8

Affected version: >=11.0.0,<12.4.0|>=9.0.0,<10.9.0|>=8.0.0,<8.5.0|<7.5.0

Reported by:
GitHub