[MEDIUM] TYPO3-EXT-SA-2026-009: Broken Access Control in extension "Frontend User Registration" (sf_register)

PKSA-1gw5-qx8s-xyvr CVE-2026-46721 GHSA-v348-vr4q-fv9p

Affected package: evoweb/sf-register

Affected version: >=14.0.0,<14.0.2|<13.2.4

Reported by:
FriendsOfPHP/security-advisories, GitHub