v3.2.5

🚨 Security

These security issues are only exploitable by a user with admin panel access and the right permissions.

• [core:framework] Add permission to CTB routes (#8439) @Convly
• [plugin:content-manager] Fix XSS security with the wysiwyg preview (#8440) @soupette
• [plugin:upload] Remove usage of unsecure proxy for now (#8442) @alexandrebodin

Big shoutouts 🔥 to Tomáš Melicher and Lukáš Václavík for finding these issues and helping us make Strapi better !

🐛 Bug fix

• [admin] Fix #8413 - Immer dependancy (#8420) @derrickmehaffy
• [core:database] fix d&p regressions (#8314) @petersg83
• [core:database] Fix deepFiltering with draft & publish (#8356) @Convly

💅 Enhancement

• [admin] add didUpdateRolePermissions event (#8333) @petersg83
• [documentation] Adapt README.md because NodeJS 14 is supported now (#8417) @bykof

---

📚 Migration guides can be found here 📚