Tue. 25th June, 2019
It has been discovered that a third party dependency used by TYPO3 CMS is susceptible of being used during insecure deserialization.
This is a companion discussion topic for the original entry at https://typo3.org/article/typo3-core-sa-2019-016