# Strapi v3.2.5 — Release & Upgrade Intelligence
- **Product:** Strapi (https://strapi.io)
- **Version:** v3.2.5
- **Released:** Oct 22, 2020
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/strapi/updates/v3.2.5/

## Executive Summary (TL;DR)
Strapi v3.2.5. Source highlight: *These security issues are only exploitable by a user with admin panel access and the right permissions.*

## New Features
- [core:framework] Add permission to CTB routes (https://github.com/strapi/strapi/pull/8439) @Convly
- [admin] add didUpdateRolePermissions event (https://github.com/strapi/strapi/pull/8333) @petersg83

## Improvements
- [documentation] Adapt README.md because NodeJS 14 is supported now (https://github.com/strapi/strapi/pull/8417) @bykof

## Bug Fixes
- [plugin:content-manager] Fix XSS security with the wysiwyg preview (https://github.com/strapi/strapi/pull/8440) @soupette
- [admin] Fix #8413 - Immer dependancy (https://github.com/strapi/strapi/pull/8420) @derrickmehaffy
- [core:database] fix d&p regressions (https://github.com/strapi/strapi/pull/8314) @petersg83
- [core:database] Fix deepFiltering with draft & publish (https://github.com/strapi/strapi/pull/8356) @Convly