Skip to content

Security: TYPO3/html-sanitizer

SECURITY.md

Security Policy

Supported Versions

The following matrix shows the versions that are currently maintained.

Version Supported
2.x
1.5.x
< 1.5.0

Reporting a Vulnerability

Please report potential vulnerabilities to the TYPO3 Security Team either

Message Encryption

It is possible to send GPG/PGP encrypted emails to security@typo3.org using key id C05FBE60 (complete fingerprint B41C C3EF 373E 0F5C 7018 7FE9 3BEF BD27 C05F BE60):

TYPO3 Release Dates / "Patchday"

TYPO3 releases (including potential security fixes) are usually released on Tuesdays (except for holidays like Christmas or New Year's Day).

Maintenance releases for stable versions have been scheduled in advance - it is very likely that security fixes are released during these dates as well.

Learn more about advisories related to TYPO3/html-sanitizer in the GitHub Advisory Database