New release: Strapi v3.2.4 - Security Fix

Hello everyone!

We have just released a new version that fixes a security issue.

Please note this version does have a migration guide.

Here’s the changelog, as we did fix a few other smaller bugs.

:rotating_light: Security

  • Add confirmationToken to user for email confirmation (#8365)

:rocket: New Feature

  • Reset admin password CLI (#8311)

:bug: Bug Fix

  • Support query operators _or & _where in graphql with deep nesting (#8332)
  • Fix file info of new uploaded file not being persisted after edit (#8244)

:fire: Enhancement

  • Don’t use mongoose 5.10.7 (#8278)
  • Support node v14 + CI refactor (#8226)

Thank you,
The Strapi team


Quick question: what does “extended the Users-Permissions User model” mean?

So as long as there’s this file ./extensions/users-permissions/models/User.settings.json in my folders, I should use the migration guide first?

Exactly @jasonleow

1 Like