Ghost 3.18.0stable Released Jun 02, 2020
Impact Score: 5/10

Ghost 3.18.0 โ€” Release Notes & Engineering Impact

Source available โ€” automated, not human-reviewed

Component: ghost ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified โ€” check source notes
๐Ÿ“„ .MD
โšก Executive Summary (TL;DR)

Ghost 3.18.0. Source highlight: :lock: Improved security of oembed endpoint by restricting access to sites on private IP blocks - Kevin Ansfield

Who Does This Impact? (Role-Based Analysis)

๐Ÿ’ป Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

๐Ÿ“Š Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

โš™๏ธ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

โœจ New Features & Capabilities (1)

  • โœจ Added `?search=` param to Admin API members endpoint (#11854) - Kevin Ansfield

โšก Performance & Enhancements (2)

  • :lock: Improved security of oembed endpoint by restricting access to sites on private IP blocks - Kevin Ansfield
  • โœจ Improved performance of members admin screens - Kevin Ansfield

๐Ÿ”ง Bug Fixes & Patches (5)

  • ๐Ÿ› Fixed iframe script for AMP not injected - Aileen Nowak
  • ๐Ÿ› Fixed various Close buttons throughout the UI. (#1585) - Marco Zehe
  • ๐Ÿ› Fixed various small accessibility problems in the admin screen (#1583) - Marco Zehe
  • ๐Ÿ› Fixed email preview not visible to Editors - Rish
  • ๐Ÿ› Fixed test email permissions for non-owner roles - Rish
๐Ÿ“„ View Raw Release Notes (Original Developer Log)
* :lock: Improved security of oembed endpoint by restricting access to sites on private IP blocks - Kevin Ansfield * โœจ Improved performance of members admin screens - Kevin Ansfield * โœจ Added `?search=` param to Admin API members endpoint (#11854) - Kevin Ansfield * ๐Ÿ› Fixed iframe script for AMP not injected - Aileen Nowak * ๐Ÿ› Fixed various Close buttons throughout the UI. (#1585) - Marco Zehe * ๐Ÿ› Fixed various small accessibility problems in the admin screen (#1583) - Marco Zehe * ๐Ÿ› Fixed email preview not visible to Editors - Rish * ๐Ÿ› Fixed test email permissions for non-owner roles - Rish See the changelogs for [Ghost](https://github.com/tryghost/ghost/compare/3.17.1...3.18.0) and [Ghost-Admin](https://github.com/tryghost/ghost-admin/compare/3.17.1...3.18.0) for the details of every change in this release.