[MEDIUM] Flow Bugfix Releases for Entity Security

PKSA-mjrm-8hdb-yqsg GHSA-m2hp-5x78-74mg

Affected version: >=3.0.0,<3.0.12|>=3.1.0,<3.1.10|>=3.2.0,<3.2.13|>=3.3.0,<3.3.13|>=4.0.0,<4.0.6

Reported by:
GitHub, FriendsOfPHP/security-advisories

[MEDIUM] Time-Based Information Disclosure Vulnerability in Flow

PKSA-bwbr-qnv1-v2ws GHSA-2p4f-vc9q-r5vp

Affected version: >=2.3.0,<2.3.16|>=3.0.0,<3.0.10|>=3.1.0,<3.1.7|>=3.2.0,<3.2.7|>=3.3.0,<3.3.5

Reported by:
GitHub, FriendsOfPHP/security-advisories

[MEDIUM] Arbitrary file upload and XML External Entity processing

PKSA-5wgs-7sf8-8pnf GHSA-r6mm-wmhf-849m

Affected version: >=2.3.0,<2.3.7|>=3.0.0,<3.0.1

Reported by:
GitHub, FriendsOfPHP/security-advisories

[MEDIUM] Cross-Site Scripting in TYPO3 Flow

PKSA-yfjv-513f-rbzy CVE-2013-7082 GHSA-vc74-c4m6-9979

Affected version: >=1.1.0,<1.1.1|>=2.0.0,<2.0.1

Reported by:
GitHub, FriendsOfPHP/security-advisories

[HIGH] Insecure Unserialize Vulnerability in FLOW3

PKSA-k668-wp2w-19w3 GHSA-vh6j-wv25-8qxr

Affected version: >=1.0.0,<1.0.4

Reported by:
GitHub, FriendsOfPHP/security-advisories