PKSA-d3w6-c3np-2vn6: TYPO3-EXT-SA-2026-038: Broken Access Control in extension "Frontend User Registration" (sf_register)
Published Nov 3, 2026
·Updated
TYPO3-EXT-SA-2026-038: Broken Access Control in extension "Frontend User Registration" (sfregister)
Affected Software
2 affected componentsFixes available
composer/evoweb/sf-register>=14.0.0, <14.0.3
14.0.3
composer/evoweb/sf-register<13.2.5
13.2.5
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/evoweb/sf-registerto a version that resolves this vulnerability.Fixed in 14.0.3 - Upgrade
Upgrade
composer/evoweb/sf-registerto a version that resolves this vulnerability.Fixed in 13.2.5
Event History
Nov 3, 2026
Advisory Published
via Packagist·09:00 AM
Data Sourced
via Packagist·09:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which package should be checked in dependency inventories?
Check for the Composer package composer/evoweb/sf-register.
2
When was this advisory published and last modified?
It was published on 2026-11-03 and was last modified on 2026-11-03.