Extension "Address List" vulnerabilities

1 known vulnerability in Extension "Address List" from TYPO3. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Extension "Address List": Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-8827May 19, 2026TYPO3

  The AddressRepository::getSqlQuery() method constructs a database query without properly sanitizing user input, leading to SQL Injection. The method is not invoked anywhere within the extension itself and therefore poses no direct risk in a default installatio