Here is a list of what was fixed since [10.4.13]:

• 2021-03-16 9f8b73eb73 [RELEASE] Release of TYPO3 10.4.14 (thanks to Oliver Hader)
• 2021-03-16 0ce12c5876 [SECURITY] Mitigate XSS in PreviewRenderer for menus (thanks to Oliver Bartsch)
• 2021-03-16 35a82bb1d2 [SECURITY] XSS in PreviewRenderer with descriptions (thanks to Andreas Fernandez)
• 2021-03-16 246193c8aa [SECURITY] Avoid storing plain session identifier in $USER->uc (thanks to Oliver Hader)
• 2021-03-16 94b6e27b71 [SECURITY] Add cache for error page handling (thanks to Frank Naegler)
• 2021-03-16 1b6d4b7790 [SECURITY] XSS in form creation wizard (thanks to Andreas Fernandez)
• 2021-03-16 b99a4902ef [SECURITY] Validate allowed values for form element editors (thanks to Ralf Zimmermann)
• 2021-03-16 8335b0eb3d [SECURITY] Mitigate directly accessible file upload in form framework (thanks to Oliver Hader)
• 2021-03-16 a43a6d5772 [SECURITY] Prevent urls starting with // to be used for redirects (thanks to Torben Hansen)
• 2021-03-15 987fb8a7c0 [BUGFIX] Revert "Make ClassSchema PHP 8 compatible" (thanks to Benni Mack)
• 2021-03-15 a899506162 [BUGFIX] Show cookie warning only for successful authentication (thanks to Markus Klein)
• 2021-03-15 72cc089c53 [TASK] Replace one wiki link by documentation link (thanks to Alexander Nitsche)
• 2021-03-14 84ac6c216a [TASK] Stabilize acceptance installer tests (thanks to Christian Kuhn)
• 2021-03-14 bc1733bdeb [BUGFIX] Fixes search with search type "sentence" (thanks to Tina Westner)
• 2021-03-14 f6ae73b938 [TASK] Raise typo3/testing-framework ^6.8.0 (thanks to Christian Kuhn)
• 2021-03-14 d49cf03ef9 [BUGFIX] Add some waiting period to LoginCest after page reload (thanks to Anja Leichsenring)
• 2021-03-14 614eb0cdc9 [BUGFIX] Correct LLL:EXT language identifiers (thanks to Torben Hansen)
• 2021-03-14 add5ffc624 [BUGFIX] Correct file path in acceptance tests (thanks to Christian Kuhn)
• 2021-03-14 4a3981a1b3 [BUGFIX] Remove maxitems constraint from be_groups.pagetypes_select (thanks to Andreas Fernandez)
• 2021-03-12 ae362aae46 [TASK] Replace wiki links by documentation links (thanks to Alexander Nitsche)
• 2021-03-12 5a5bbe5351 [BUGFIX] Unknown column 't3ver_oid' in 'field list' (thanks to Benoit Chenu)
• 2021-03-12 40ba532b0a [BUGFIX] Show proper error when a folder already exists on copy action (thanks to Richard Haeser)
• 2021-03-12 7d4223084f [TASK] runTests.sh: Allow to execute phpstan sub-set (thanks to Christian Kuhn)
• 2021-03-12 5ac3c53891 [TASK] Update CKEditor to 4.16.0 (thanks to Georg Ringer)
• 2021-03-11 4ee4a1393d [BUGFIX] Fix TypeError in InlineControlContainer (thanks to Oliver Bartsch)
• 2021-03-11 a6dc1cbba7 [BUGFIX] Include IP in authentication logs (thanks to Markus Klein)
• 2021-03-10 dd80c59574 [BUGFIX] Use correct case for function calls (thanks to Oliver Bartsch)
• 2021-03-10 673f0fc01c [BUGFIX] Display deleted files stats for temporary processed files (thanks to Česlav Przywara)
• 2021-03-10 929121d5c7 [BUGFIX] FormEngine: Consider checkboxes representing a value only in selectCheckBox (thanks to Andreas Fernandez)
• 2021-03-10 aca0346337 [TASK] Add example to SYS|reverseProxyPrefix config (thanks to Markus Klein)
• 2021-03-10 6f32351e18 [BUGFIX] FormEngine: Validate human-readable selectMultipleSideBySide field (thanks to Andreas Fernandez)
• 2021-03-09 513c840d8f [BUGFIX] Use Live Page ID in workspace routing (thanks to Benni Mack)
• 2021-03-09 ce413e7021 [BUGFIX] Trim locallang label references in LanguageService (thanks to Georg Ringer)
• 2021-03-08 b75cdac8ae [BUGFIX] Let large labels wrap in FormEngine (thanks to Georg Ringer)
• 2021-03-06 950ba77512 [BUGFIX] Show records in ws preview if live is hidden (thanks to Christian Kuhn)
• 2021-03-04 bb0abd0ed5 [DOCS] Fix broken cross reference to changelog entry (thanks to Daniel Siepmann)
• 2021-03-03 fc0f2b891b [BUGFIX] Fix TypeError in workspace module (thanks to Oliver Bartsch)
• 2021-03-03 ef2c40860f [DOCS] Update outdated information about FlashMessagesViewHelper caching (thanks to Daniel Siepmann)
• 2021-03-03 7fe2854b45 [BUGFIX] Inject Logger into LanguagePackService (thanks to Martin Kutschker)
• 2021-03-02 473601ac25 [TASK] Use null coalescing operator for userfunction's configuration (thanks to Georg Ringer)
• 2021-03-02 a16dd22610 [BUGFIX] Show diff for new and delete placeholder records (thanks to Oliver Bartsch)
• 2021-03-01 64ad7fe50f [BUGFIX] Add rowSum to runThroughTemplatesPostProcessing hook parameters (thanks to Jigal van Hemert)
• 2021-03-01 e97eff6370 [TASK] Integrate InstallTool acceptance suite into Backend suite (thanks to Anja Leichsenring)
• 2021-03-01 1c5e8693e8 [TASK] Do not unserialize stdClass of be_users.uc in extensionmanager (thanks to Stephan Großberndt)
• 2021-03-01 36ea2b493b [TASK] Make ClassSchema PHP 8 compatible (thanks to Alexander Schnitzler)
• 2021-03-01 c161f2d631 [BUGFIX] Avoid SQL error when saving be_users.uc on PostgreSQL (thanks to Stephan Großberndt)
• 2021-03-01 f18a5aa2f8 [TASK] Integrate Pagetree acceptance suite into Backend suite (thanks to Anja Leichsenring)
• 2021-02-28 8f1c9b9dbf [TASK] Remove systemLogLevel example in Router.ts (thanks to Nikita Hovratov)
• 2021-02-28 30ef996151 [TASK] Default retry for GitlabCI test jobs (thanks to Anja Leichsenring)
• 2021-02-27 4afc415104 [TASK] Deal with xdebug 3 (thanks to Christian Kuhn)
• 2021-02-27 4a918297bf [TASK] Drop an always skipped unit test (thanks to Christian Kuhn)
• 2021-02-26 b3604284fd [TASK] gitlab-ci nightly slack notification (thanks to Christian Kuhn)
• 2021-02-25 78923aac0d [TASK] Make PopulatePageSlugs extendable (thanks to Philipp Kitzberger)
• 2021-02-25 7d21718c2b [TASK] Replace string parsing in Message with unpack (thanks to Claus Due)
• 2021-02-25 10bd347e22 [BUGFIX] Enforce closing tags in Fluid f:form.button ViewHelper (thanks to Oliver Bartsch)
• 2021-02-25 e0ec34761a [BUGFIX] Set request object in EXT:form EmailFinisher (thanks to Oliver Bartsch)
• 2021-02-25 c0994bc0ee [BUGFIX] Recognize removed columns on PostgreSQL (thanks to Stephan Großberndt)
• 2021-02-24 672cec3ea8 [TASK] Merge test splitter scripts to core (thanks to Christian Kuhn)
• 2021-02-24 3668220fac [TASK] Do not require sudo mode in development context (thanks to Oliver Bartsch)
• 2021-02-23 3f889be2a8 [BUGFIX] Import data from yaml imports in declaration order (thanks to Jigal van Hemert)
• 2021-02-23 7ec120fa08 [BUGFIX] Add PHP8 compatibility to phpdocumentor packages (thanks to Daniel Goerz)
• 2021-02-23 dd31f363b7 [BUGFIX] Revert "Recognize removed columns on PostgreSQL" (thanks to Benni Mack)
• 2021-02-22 e23f15f2df [BUGFIX] Recognize removed columns on PostgreSQL (thanks to Stephan Großberndt)
• 2021-02-22 34d8fc5765 [TASK] Default TS has to be set in ext_typoscript_setup (thanks to Stefan Frömken)
• 2021-02-22 17839a86cd [BUGFIX] Page module CE's in workspace with defLangBinding=1 (thanks to Christian Kuhn)
• 2021-02-17 1f46b0c54c [TASK] Build / CI: Get all exception codes of TYPO3 on CLI (thanks to Alexander Nitsche)
• 2021-02-17 75fe0ee140 [BUGFIX] Use site name rather than pageUid for calling context menu (thanks to Anja Leichsenring)
• 2021-02-17 aec15deadb [BUGFIX] Do not try to resolve TypoScript [ELSE] condition (thanks to Torben Hansen)
• 2021-02-16 4e515f88f6 [TASK] Add examples to AjaxRequest code (thanks to Oliver Hader)
• 2021-02-16 1aa9a73891 [BUGFIX] Correctly create section menu for pages showing content of other pages (thanks to Christoph Lehmann)
• 2021-02-16 f85413c729 [TASK] Set TYPO3 version to 10.4.14-dev (thanks to Benni Mack)