Impact Score: 5/10
Ghost 3.18.0 โ Release Notes & Engineering Impact
Source available โ automated, not human-reviewed
Component: ghost ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
โก Executive Summary (TL;DR)
Ghost 3.18.0. Source highlight: :lock: Improved security of oembed endpoint by restricting access to sites on private IP blocks - Kevin Ansfield
Who Does This Impact? (Role-Based Analysis)
๐ป Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
๐ Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
โ๏ธ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
โจ New Features & Capabilities (1)
- โจ Added `?search=` param to Admin API members endpoint (#11854) - Kevin Ansfield
โก Performance & Enhancements (2)
- :lock: Improved security of oembed endpoint by restricting access to sites on private IP blocks - Kevin Ansfield
- โจ Improved performance of members admin screens - Kevin Ansfield
๐ง Bug Fixes & Patches (5)
- ๐ Fixed iframe script for AMP not injected - Aileen Nowak
- ๐ Fixed various Close buttons throughout the UI. (#1585) - Marco Zehe
- ๐ Fixed various small accessibility problems in the admin screen (#1583) - Marco Zehe
- ๐ Fixed email preview not visible to Editors - Rish
- ๐ Fixed test email permissions for non-owner roles - Rish
๐ View Raw Release Notes (Original Developer Log)
* :lock: Improved security of oembed endpoint by restricting access to sites on private IP blocks - Kevin Ansfield
* โจ Improved performance of members admin screens - Kevin Ansfield
* โจ Added `?search=` param to Admin API members endpoint (#11854) - Kevin Ansfield
* ๐ Fixed iframe script for AMP not injected - Aileen Nowak
* ๐ Fixed various Close buttons throughout the UI. (#1585) - Marco Zehe
* ๐ Fixed various small accessibility problems in the admin screen (#1583) - Marco Zehe
* ๐ Fixed email preview not visible to Editors - Rish
* ๐ Fixed test email permissions for non-owner roles - Rish
See the changelogs for [Ghost](https://github.com/tryghost/ghost/compare/3.17.1...3.18.0) and [Ghost-Admin](https://github.com/tryghost/ghost-admin/compare/3.17.1...3.18.0) for the details of every change in this release.