CVE-2021-38623: Deferred Image Processing Project Deferred Image Processing

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

The deferred_image_processing (aka Deferred image processing) extension before 1.0.2 for TYPO3 allows Denial of Service via the FAL API because of /var/transient disk consumption.

Affected products

• Deferred Image Processing Project Deferred Image Processing: before 1.0.2 (fixed in 1.0.2)

Published 2021-08-13. Last modified 2026-06-17.