Impact Score: 5/10
Strapi v3.2.5 β Release Notes & Engineering Impact
Source available β automated, not human-reviewed
Component: strapi Β· Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
β‘ Executive Summary (TL;DR)
Strapi v3.2.5. Source highlight: *These security issues are only exploitable by a user with admin panel access and the right permissions.*
Who Does This Impact? (Role-Based Analysis)
π» Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
π Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
βοΈ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
β¨ New Features & Capabilities (2)
- [core:framework] Add permission to CTB routes (https://github.com/strapi/strapi/pull/8439) @Convly
- [admin] add didUpdateRolePermissions event (https://github.com/strapi/strapi/pull/8333) @petersg83
β‘ Performance & Enhancements (1)
- [documentation] Adapt README.md because NodeJS 14 is supported now (https://github.com/strapi/strapi/pull/8417) @bykof
π§ Bug Fixes & Patches (4)
- [plugin:content-manager] Fix XSS security with the wysiwyg preview (https://github.com/strapi/strapi/pull/8440) @soupette
- [admin] Fix #8413 - Immer dependancy (https://github.com/strapi/strapi/pull/8420) @derrickmehaffy
- [core:database] fix d&p regressions (https://github.com/strapi/strapi/pull/8314) @petersg83
- [core:database] Fix deepFiltering with draft & publish (https://github.com/strapi/strapi/pull/8356) @Convly
π View Raw Release Notes (Original Developer Log)
### π¨ Security
*These security issues are only exploitable by a user with admin panel access and the right permissions.*
* [core:framework] Add permission to CTB routes (https://github.com/strapi/strapi/pull/8439) @Convly
* [plugin:content-manager] Fix XSS security with the wysiwyg preview (https://github.com/strapi/strapi/pull/8440) @soupette
* [plugin:upload] Remove usage of unsecure proxy for now (https://github.com/strapi/strapi/pull/8442) @alexandrebodin
Big shoutouts π₯ to **TomΓ‘Ε‘ Melicher** and **LukΓ‘Ε‘ VΓ‘clavΓk** for finding these issues and helping us make Strapi better !
### π Bug fix
* [admin] Fix #8413 - Immer dependancy (https://github.com/strapi/strapi/pull/8420) @derrickmehaffy
* [core:database] fix d&p regressions (https://github.com/strapi/strapi/pull/8314) @petersg83
* [core:database] Fix deepFiltering with draft & publish (https://github.com/strapi/strapi/pull/8356) @Convly
### π
Enhancement
* [admin] add didUpdateRolePermissions event (https://github.com/strapi/strapi/pull/8333) @petersg83
* [documentation] Adapt README.md because NodeJS 14 is supported now (https://github.com/strapi/strapi/pull/8417) @bykof
---
### π Migration guides can be found [here](https://strapi.io/documentation/v3.x/migration-guide) π