Strapi v3.2.5stable Released Oct 22, 2020
Impact Score: 5/10

Strapi v3.2.5 β€” Release Notes & Engineering Impact

Source available β€” automated, not human-reviewed

Component: strapi Β· Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified β€” check source notes
πŸ“„ .MD
⚑ Executive Summary (TL;DR)

Strapi v3.2.5. Source highlight: *These security issues are only exploitable by a user with admin panel access and the right permissions.*

Who Does This Impact? (Role-Based Analysis)

πŸ’» Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

πŸ“Š Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

βš™οΈ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

✨ New Features & Capabilities (2)

  • [core:framework] Add permission to CTB routes (https://github.com/strapi/strapi/pull/8439) @Convly
  • [admin] add didUpdateRolePermissions event (https://github.com/strapi/strapi/pull/8333) @petersg83

⚑ Performance & Enhancements (1)

  • [documentation] Adapt README.md because NodeJS 14 is supported now (https://github.com/strapi/strapi/pull/8417) @bykof

πŸ”§ Bug Fixes & Patches (4)

  • [plugin:content-manager] Fix XSS security with the wysiwyg preview (https://github.com/strapi/strapi/pull/8440) @soupette
  • [admin] Fix #8413 - Immer dependancy (https://github.com/strapi/strapi/pull/8420) @derrickmehaffy
  • [core:database] fix d&p regressions (https://github.com/strapi/strapi/pull/8314) @petersg83
  • [core:database] Fix deepFiltering with draft & publish (https://github.com/strapi/strapi/pull/8356) @Convly
πŸ“„ View Raw Release Notes (Original Developer Log)
### 🚨 Security *These security issues are only exploitable by a user with admin panel access and the right permissions.* * [core:framework] Add permission to CTB routes (https://github.com/strapi/strapi/pull/8439) @Convly * [plugin:content-manager] Fix XSS security with the wysiwyg preview (https://github.com/strapi/strapi/pull/8440) @soupette * [plugin:upload] Remove usage of unsecure proxy for now (https://github.com/strapi/strapi/pull/8442) @alexandrebodin Big shoutouts πŸ”₯ to **TomΓ‘Ε‘ Melicher** and **LukΓ‘Ε‘ VΓ‘clavΓ­k** for finding these issues and helping us make Strapi better ! ### πŸ› Bug fix * [admin] Fix #8413 - Immer dependancy (https://github.com/strapi/strapi/pull/8420) @derrickmehaffy * [core:database] fix d&p regressions (https://github.com/strapi/strapi/pull/8314) @petersg83 * [core:database] Fix deepFiltering with draft & publish (https://github.com/strapi/strapi/pull/8356) @Convly ### πŸ’… Enhancement * [admin] add didUpdateRolePermissions event (https://github.com/strapi/strapi/pull/8333) @petersg83 * [documentation] Adapt README.md because NodeJS 14 is supported now (https://github.com/strapi/strapi/pull/8417) @bykof --- ### πŸ“š Migration guides can be found [here](https://strapi.io/documentation/v3.x/migration-guide) πŸ“š