# Saleor 3.23.38 — Release & Upgrade Intelligence
- **Product:** Saleor (https://saleor.io)
- **Version:** 3.23.38
- **Released:** Oct 02, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/saleor/updates/3.23.38/

## Executive Summary (TL;DR)
Saleor 3.23.38. Source highlight: **Dependencies & security:**

## New Features
- Added possibility for apps to declare deprecation status
- Added `externalReference` support to Promotion and Category by @DamianCzajkowski in https://github.com/saleor/saleor/pull/19830 + https://github.com/saleor/saleor/pull/19831

## Bug Fixes
- Upgraded urllib3 to fix CVE-2026-97689, CVE-2026-97688, CVE-2026-97687
- Upgraded Python to latest patch version (3.12.15) to fix CVE-2026-19445 and CVE-2026-19553
- Fixed checkout payload crash when assigned delivery is deleted
- Fixed migrations not respecting `POPULATE_DEFAULTS` preference