TYPO3-EXT-SA-2026-022: Server-Side Template Injection in extension "powermail" (powermail)

PKSA-dhfp-j236-nf9h CVE-2026-77136

Affected version: >=13.0.0,<13.2.1|>=11.0.0,<12.6.1|<10.9.3

Reported by:
FriendsOfPHP/security-advisories

[MEDIUM] Powermail extension for TYPO3 allows Insecure Direct Object Reference

PKSA-6dn8-jtbj-nzf7 CVE-2025-7899 GHSA-x769-3cwv-f8hc

Affected version: =13.0.0|>=12.0.0,<12.5.3

Reported by:
GitHub

[MEDIUM] TYPO3-EXT-SA-2024-007: Insecure Direct Object Reference in extension "powermail" (powermail)

PKSA-smk7-6q9f-1yz5 CVE-2024-47047 GHSA-q25c-r482-77p9

Affected version: >=12.0.0,<12.4.1|>=9.0.0,<10.9.1|>=8.0.0,<8.5.1|<7.5.1

Reported by:
GitHub, FriendsOfPHP/security-advisories