TYPO3 13.4.37

Release Notes

Version 13.4.37

Release Notes for TYPO3 CMS 13.4.37

This document contains information about TYPO3 CMS 13.4.37 which was released on 22.10.2026.

News

This version is a bugfix and maintenance release.

It also updates the third-party dependency "enshrined/svg-sanitize" to the security release 1.1.1 and fixes an incompatibility with version 1.1 when sanitizing HTML with embedded SVG, for example via . In addition, "symfony/expression-language", "symfony/http-foundation" and "symfony/yaml" are updated to address security advisories.

Read TYPO3 13.4.37 Release News

Checksums of TYPO3 13.4.37

SHA256

ced1bcfed16a9b1273977ff75c3ae12e757fe3cefda805ac3cf2a963743df85c typo3_src-13.4.37.tar.gz
f74a5ff79d4fdbdf1acc73a6f25fb8b56bc5d17fd100cf99f84769e2f136486a typo3_src-13.4.37.zip

SHA1

154be9fcd2a2b9e3c501c554ec5b9d9379c83377 typo3_src-13.4.37.tar.gz
23da2da552d43f0ba846e5dbc30a3cbb3dcdb874 typo3_src-13.4.37.zip

MD5

6e9122cbb732a2b23436433f5951adcb typo3_src-13.4.37.tar.gz
73fbf74992ebf65ab831007ec657ca87 typo3_src-13.4.37.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/13.4.37/tar.gz
wget --content-disposition https://get.typo3.org/13.4.37/tar.gz.sig
gpg --verify typo3_src-13.4.37.tar.gz.sig typo3_src-13.4.37.tar.gz

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 13.4.36:

2026-10-22 05ec0d9f026 [RELEASE] Release of TYPO3 13.4.37 (thanks to Benni Mack)
2026-10-21 5d3a63db8bf [TASK] Raise symfony/* and composer/composer packages (thanks to Benjamin Franzke)
2026-10-20 d12858b4018 [BUGFIX] Sanitize inline SVG nodes through public API (thanks to Oliver Bartsch)
2026-10-19 fb066c3a0fa [TASK] Correct commit-msg hook notes in AGENTS.md (thanks to Olivier Dobberkau)
2026-10-19 bf2a0e35aad [BUGFIX] Handle backed enum record types in f:render.text (thanks to Chris Müller)
2026-10-16 4a6d8ecaa51 [BUGFIX] Respect page_links setting in indexed_search pagination (thanks to Benni Mack)
2026-10-16 902d763e40d [DOCS] Fix constructor examples in dashboard widget manual (thanks to Georg Ringer)
2026-10-16 5a7ad225ece [BUGFIX] Skip translation source field in diffsource of translations (thanks to Alexander Schnitzler)
2026-10-13 b892593a4f9 [BUGFIX] Allow longer titles in the TER extension list (thanks to Georg Ringer)
2026-10-12 9adfce8d1ac [BUGFIX] Compare image extensions case-insensitively in resize() (thanks to Alexander Schnitzler)
2026-10-10 80f65830358 [BUGFIX] Fix backend live search crash for users without page mounts (thanks to Torben Hansen)
2026-10-09 ef943c676ed [TASK] Set TYPO3 version to 13.4.37-dev (thanks to Benni Mack)