TYPO3 13.4.36

Release Notes

Version 13.4.36

Release Notes for TYPO3 CMS 13.4.36

This document contains information about TYPO3 CMS 13.4.36 which was released on 09.10.2026.

Get TYPO3 13.4.36 now

News

This version is a bugfix and maintenance release.

This version contains security related updates for the third-party package enshrined/svg-sanitize. The SVG sanitization got stricter and removes external URL references in embedded links and style definitions.

Read TYPO3 13.4.36 Release News

Checksums of TYPO3 13.4.36

SHA256

49aed89d1d90e2919c4fcc05d6fea95b8b693d3481589d74ed5215084c3fce3b typo3_src-13.4.36.tar.gz
da8314bbef807c9b977866c8a74a060b8717147b12a460afd830d016d0f2078e typo3_src-13.4.36.zip

SHA1

604ee8b6dbd5e6e45d0d9a31540ce877b7b24604 typo3_src-13.4.36.tar.gz
242a47af4d6bcf2a02100cbd9d63c6bc54c0e5c1 typo3_src-13.4.36.zip

MD5

519e93d0a2a06afbd94d319b1f8c6134 typo3_src-13.4.36.tar.gz
fec97496c168ff0dfa94f88cd0908996 typo3_src-13.4.36.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/13.4.36/tar.gz
wget --content-disposition https://get.typo3.org/13.4.36/tar.gz.sig
gpg --verify typo3_src-13.4.36.tar.gz.sig typo3_src-13.4.36.tar.gz

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 13.4.35:

  • 2026-10-09 acc9e947a74 [RELEASE] Release of TYPO3 13.4.36 (thanks to Benni Mack)
  • 2026-10-09 33267e6ab7e [TASK] Raise dependencies for classic mode setups (thanks to Benni Mack)
  • 2026-10-09 94a2ef161e3 [TASK] Update enshrined/svg-sanitize to ^1.0 (thanks to Benjamin Franzke)
  • 2026-10-08 de903a2e44a [BUGFIX] Respect abort override in pre-commit hook (thanks to Olivier Dobberkau)
  • 2026-10-08 1152b5bea1b [BUGFIX] Show stored MM relations in record history diff (thanks to Wolfgang Klinger)
  • 2026-10-07 deb763e1e66 [BUGFIX] Support schemeless URLs in forceAbsoluteUrl() (thanks to Maike Kiebele)
  • 2026-10-07 598f57c55a5 [TASK] Update PHPStan to v2.3 (thanks to Wouter Wolters)
  • 2026-10-06 c1e1b843879 [TASK] Remove unnecessary ksort() in BackendLayoutWizardElement (thanks to Oli Bartsch)
  • 2026-10-06 12cc61bf4d1 [TASK] Speed up styleguide demo data generation (thanks to Benjamin Franzke)
  • 2026-10-05 10f64c389c3 [BUGFIX] Fix typo in runTests.sh error messages (thanks to Oliver Klee)
  • 2026-10-03 41bc133f802 [DOCS] Replace "Edit on Github" button with how to document link (thanks to Lina Wolf)
  • 2026-10-01 658c74d4692 [BUGFIX] Fix issue where editors cannot enable or disable redirects (thanks to Marno Schmigotzki)
  • 2026-09-30 a37e0971f09 [BUGFIX] Prevent integer overflow in paginator offset calculation (thanks to Georg Ringer)
  • 2026-09-30 9e3ace89048 [BUGFIX] Remove garbage collected rows in batches (thanks to Stefan Bürk)
  • 2026-09-27 d3400ac134a [BUGFIX] Fix Extension Scanner rule for returnWebmounts() (thanks to Olivier Dobberkau)
  • 2026-09-25 bfbf686091d [BUGFIX] Respect uidInList order in database queries (thanks to Wouter Wolters)
  • 2026-09-25 16d1bd3539d [BUGFIX] Guard page tree labels against NULL page titles (thanks to Wolfgang Klinger)
  • 2026-09-25 ad3d02ac351 [TASK] Optimize pre-merge CI for smaller ReST rendering (thanks to Garvin Hicking)
  • 2026-09-25 5d8f7cba187 [TASK] Update PHPStan to v2.2.16 (thanks to Garvin Hicking)
  • 2026-09-25 5265579863b [TASK] Un-mark Connection::quoteIdentifier() override as deprecated (thanks to Till Hörner)
  • 2026-09-24 fb90f67c54c [DOCS] Fix wrong highlighted lines in form documentation (thanks to Chris Müller)
  • 2026-09-24 9b97837cd12 [TASK] Update PHPStan to v2.2.15 (thanks to Stefan Bürk)
  • 2026-09-23 3807ce51cea [DOCS] Correct capitalization of class references in changelog (thanks to Lina Wolf)
  • 2026-09-23 c49ff044e4d [DOCS] Document regular expressions in htmlSupport of Default.yaml (thanks to Benni Mack)
  • 2026-09-23 b39fac5925c [DOCS] Remove duplicated namespace segments in changelog (thanks to Lina Wolf)
  • 2026-09-23 8461fdcae8a [DOCS] Fix misspelled class references in changelog (thanks to Lina Wolf)
  • 2026-09-23 e69a7e55ee2 [DOCS] Correct sub-namespace of class references in changelog (thanks to Lina Wolf)
  • 2026-09-22 18ee7810556 [TASK] Upgrade to CKEditor 5 v48.5.2 (thanks to Garvin Hicking)
  • 2026-09-20 ddd99705810 [TASK] Update ISO Database (thanks to Wouter Wolters)
  • 2026-09-19 6b7ea8d434d [DOCS] Remove DatabaseWriter from log rotation examples (thanks to Lina Wolf)
  • 2026-09-19 cbdf4694f03 [DOCS] Fix unbalanced inline markup in changelog entries (thanks to Lina Wolf)
  • 2026-09-19 b2cc14a70ed [DOCS] Fix unbalanced inline markup in form documentation (thanks to Lina Wolf)
  • 2026-09-19 6936902dff0 [DOCS] Use local references within system extension manuals (thanks to Lina Wolf)
  • 2026-09-18 0077029c835 [BUGFIX] Quote container binary check in runTests.sh (thanks to Georg Ringer)
  • 2026-09-16 30522e41979 [TASK] Upgrade to CKEditor 5 v48 (thanks to Benjamin Franzke)
  • 2026-09-15 8e885b414db [BUGFIX] Reset page TCAdefaults for each new record (thanks to Stefan Bürk)
  • 2026-09-15 0c81c8fc685 [BUGFIX] Suppress warnings from GeneralUtility::writeFile() (thanks to Benjamin Franzke)
  • 2026-09-15 f3d68c3f131 [BUGFIX] Rename the field shown in the page tree (thanks to Georg Ringer)
  • 2026-09-15 ac64a69e5cb [BUGFIX] Use exact cookie parameters for cookie removal (thanks to Benjamin Franzke)
  • 2026-09-14 af8eb6b5dc2 [DOCS] Remove wrong RTE.config.contentsLanguageDirection hint (thanks to Maike Kiebele)
  • 2026-09-14 78a8011a25d [BUGFIX] Label the "Navigation title" column in "Sort sub pages" (thanks to Amir Arends)
  • 2026-09-13 19f3e7a53f8 [TASK] Update PHPStan to v2.2.14 (thanks to Stefan Bürk)
  • 2026-09-11 968cdd7938e [TASK] Support HTTP QUERY requests (thanks to Wouter Wolters)
  • 2026-09-11 91c58a57dfd [TASK] Update insecure node dev dependencies (thanks to Benjamin Franzke)
  • 2026-09-10 a9b456227dd [BUGFIX] Do not shrink images to minWidth/minHeight (thanks to Maike Kiebele)
  • 2026-09-10 cc7ba985d1e [BUGFIX] Handle _TRANSLATION_SOURCE in menu processors (thanks to Georg Ringer)
  • 2026-09-09 89bd25b8141 [TASK] Skip database setup for more functional tests part 2 (thanks to Wouter Wolters)
  • 2026-09-08 1d49096d76b [TASK] Skip database setup for database-free functional tests (thanks to Wouter Wolters)
  • 2026-09-08 cf3aded5fc4 [TASK] Set TYPO3 version to 13.4.36-dev (thanks to Benni Mack)