TYPO3 13.4.27

Release Notes

Version 13.4.27

Release Notes for TYPO3 CMS 13.4.27

This document contains information about TYPO3 CMS 13.4.27 which was released on 10.03.2026.

Get TYPO3 13.4.27 now

News

This version is a bugfix and maintenance release.

Read TYPO3 13.4.27 Release News

Checksums of TYPO3 13.4.27

SHA256

9953f149f386d3dae38c477ea94bc667551c3a25a7912d900262b06308f14b67 typo3_src-13.4.27.tar.gz
61f5b4f9b27db541b4a01a4a2f2b7b3069fbb4571a4c2e980f4492692d6d3482 typo3_src-13.4.27.zip

SHA1

76d0800a8d268db1bd197a2490cb5a14a4533f2e typo3_src-13.4.27.tar.gz
5fa46d4cf73c0a6aca8b3446f416cb9235be730f typo3_src-13.4.27.zip

MD5

432691916de0a8dfb0a8298726f94cd3 typo3_src-13.4.27.tar.gz
080b6a715ee8909ae7e5cd8a696afc54 typo3_src-13.4.27.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/13.4.27/tar.gz
wget --content-disposition https://get.typo3.org/13.4.27/tar.gz.sig
gpg --verify typo3_src-13.4.27.tar.gz.sig typo3_src-13.4.27.tar.gz

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 13.4.26:

  • 2026-03-10 cefb2331024 [RELEASE] Release of TYPO3 13.4.27 (thanks to Oliver Hader)
  • 2026-03-10 5f0a657f21f [BUGFIX] Fix form editor crash when editing forms in multiple browser tabs (thanks to Josua Vogel)
  • 2026-03-10 0b804917ff3 [BUGFIX] Ensure core icons do not get stale due to browser caches (thanks to Benjamin Franzke)
  • 2026-03-10 d6b44f9f04a [DOCS] Add Important.rst for issue #109176 (thanks to Benjamin Franzke)
  • 2026-03-09 fc41d9398d6 [DOCS] Clarify the correct migration of TSFE->config['config'] (thanks to Simon Schaufelberger)
  • 2026-03-07 9d522cefdb8 [TASK] Fix known vulnerable npm dev dependencies (thanks to Oliver Hader)
  • 2026-03-06 775f0bdbbf8 [TASK] Improve wording on non-temporary MFA lockout (thanks to Garvin Hicking)
  • 2026-03-06 53fbb0e04b0 [DOCS] Clarify addQueryString option in ext:form documentation (thanks to Josua Vogel)
  • 2026-03-06 7e627ea863d [TASK] Upgrade to CKEditor 5 v47.6 (thanks to Benjamin Franzke)
  • 2026-03-05 4fbc1c824fa [TASK] Remove usage of alpine image in runTests.sh (thanks to Oliver Klee)
  • 2026-03-04 039bc6d8168 [BUGFIX] Preserve defVals through record_edit redirect cycle (thanks to Oliver Bartsch)
  • 2026-03-04 62bef8b23e6 [TASK] Standardize commit-msg hook error message (thanks to Sebastian Mendel)
  • 2026-03-04 8fd007e8fd3 [BUGFIX] Allow persistence to non-uid tables in SaveToDatabaseFinisher (thanks to Garvin Hicking)
  • 2026-03-04 dc8fccd6de4 [BUGFIX] Prevent InsufficientFolderAccessPermissionsException in form preview (thanks to Josua Vogel)
  • 2026-03-04 c4bafb349e1 [BUGFIX] Keep selection in filter when hard-deleting in recycler (thanks to Benni Mack)
  • 2026-03-04 01c52f2bbc3 [BUGFIX] Add typecast to value checked in DataHandler (thanks to Georg Ringer)
  • 2026-03-04 adcbd1a09f8 [BUGFIX] Handle non-string keys in implodeAttributes (thanks to Eric Harrer)
  • 2026-03-04 03ee44a65cd [TASK] Enable EnvironmentStatusReport for CLI (thanks to Garvin Hicking)
  • 2026-03-02 161f89e515f [BUGFIX] Handle missing sys_file_reference in ExtendedFileUtility (thanks to Rico Sonntag)
  • 2026-02-28 6c44415893b [TASK] Fixed spelling in createFromDatabaseValueAndTCAConfig function (thanks to Torben Hansen)
  • 2026-02-27 05de3a624da [BUGFIX] Prevent TypeError on FilesProcessor non-recursive operation (thanks to Garvin Hicking)
  • 2026-02-27 b92a7e6033c [BUGFIX] Prevent open_basedir warnings for file thumbnails (thanks to Simon Praetorius)
  • 2026-02-27 459e76bb01e [BUGFIX] Apply CSP headers to default error responses (thanks to Oliver Hader)
  • 2026-02-26 9ea3dcf37cc [BUGFIX] Use correct node property for linkable check in page browser (thanks to Georg Ringer)
  • 2026-02-26 4fc9c7e4d46 [BUGFIX] Fix duplicate cache-control headers (thanks to Peter Kraume)
  • 2026-02-26 25798eb8d34 [BUGFIX] Allow CType menu_categorized in strict mode (thanks to Georg Ringer)
  • 2026-02-25 320061699c9 [BUGFIX] Fix broken importmap when script-src-elem is configured (thanks to Matthias Vogel)
  • 2026-02-24 ebfbe353d2c [BUGFIX] Fix recycler pagination with multiple record types (thanks to Benni Mack)
  • 2026-02-24 01065f01aa3 [BUGFIX] Fix preselection in page browser/tree component (thanks to Tobias Wojtylak)
  • 2026-02-24 41270c22e1f [TASK] Update PHPStan to v2.1.40 (thanks to Garvin Hicking)
  • 2026-02-24 214d835cedc [BUGFIX] Fix caching in recycler username retrieval (thanks to Benni Mack)
  • 2026-02-20 2c0f37755c7 [BUGFIX] Add missing FormEngine labels (thanks to Benjamin Franzke)
  • 2026-02-20 ea645355cfd [BUGFIX] Fix extbase argument uploads merging (thanks to Torben Hansen)
  • 2026-02-20 d692109c975 [BUGFIX] Prevent PHP 8.5 null as array offset notice in Settings API (thanks to Garvin Hicking)
  • 2026-02-20 428d05ab409 [TASK] Set TYPO3 version to 13.4.27-dev (thanks to Oliver Hader)