TYPO3 10.4.36

Release Notes

Version 10.4.36

Stay secure and up-to-date with TYPO3 ELTS!

The TYPO3 CMS community supported from 2020-04-21 until 2023-04-30.
Extend your support now until 2026-04-30 to get access to the latest security and compatibility updates for this version.

Learn more about TYPO3 ELTS Browse the TYPO3 ELTS Portal

Release Notes for TYPO3 CMS 10.4.36

This document contains information about TYPO3 CMS 10.4.36 which was released on 07.02.2023.

Get TYPO3 10.4.36 now


This release is a combined bug fix and security release.

Find more details in the security bulletins:

Read TYPO3 10.4.36 Release News

Checksums of TYPO3 10.4.36


b303d9ec5931e83244403bcb170486619525d53668d6b3a5c4bb5a302c9a24a4 typo3_src-10.4.36.tar.gz
3e0537963f95936cf4c7808407ac52f07a47c61410aed2c88251e7d41918f2e0 typo3_src-10.4.36.zip


dbf336781a552b43713e91892a26ca22b421e97a typo3_src-10.4.36.tar.gz
ae7f582d401b9a12325e64d4d4268298ccfb4199 typo3_src-10.4.36.zip


dea0a26ece38bee48690e7c44cdddb25 typo3_src-10.4.36.tar.gz
91262debe1fdbf8a4b33d920478cf89c typo3_src-10.4.36.zip


The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.


Here is a list of what was fixed since 10.4.34:

  • 2023-02-07 e4ebf17a48 [RELEASE] Release of TYPO3 10.4.35 (thanks to Oliver Hader)
  • 2023-02-07 fa9832df37 [SECURITY] Prevent XSS due to wrong PATH_INFO evaluation (thanks to Benjamin Franzke)
  • 2023-02-07 81473ac376 [TASK] Improve comments and readability in PageArgumentValidator (thanks to Benjamin Franzke)
  • 2023-02-07 1022a0c211 [BUGFIX] Avoid disabling page caches when having cHash validation enforced (thanks to Oliver Hader)
  • 2023-02-06 5e1585ea79 [BUGFIX] Enforce validation when no cHash is given (thanks to Benni Mack)
  • 2023-01-23 b882674239 [BUGFIX] Accessing unavailable site config triggers notice instead of warning (thanks to Helmut Hummel)
  • 2023-01-18 553c43b692 [BUGFIX] Avoid logging of invalid locales in site configuration (thanks to Benni Mack)
  • 2023-01-17 317cb7c6d9 [BUGFIX] Allow CSP inline styles in directly requested SVG files (thanks to Oliver Hader)
  • 2023-01-06 5635ca42de [BUGFIX] Fix array access warning in SystemStatusUpdateTask (thanks to Helmut Hummel)
  • 2023-01-06 35b4fbeb35 [TASK] Update copyright year in README.md and INSTALL.md (thanks to Torben Hansen)
  • 2022-12-22 3b36263910 [BUGFIX] Remove unneeded quote (thanks to Georg Ringer)
  • 2022-12-15 f94acb81fa [TASK] Set TYPO3 version to 10.4.35-dev (thanks to Oliver Hader)
  • 2023-02-07 107b1bdd90 [RELEASE] Release of TYPO3 10.4.36 (thanks to Oliver Hader)
  • 2023-02-07 d7b4142020 [TASK] Set TYPO3 version to 10.4.36-dev (thanks to Oliver Hader)