# 2.8.13: Security Release

**URL:** https://meta.discourse.org/t/2-8-13-security-release/247077
**Category:** Announcements
**Tags:** release-notes
**Created:** [November 29, 2022, 5:12pm UTC](https://meta.discourse.org/t/2-8-13-security-release/247077 "2022-11-29T17:12:35Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [November 29, 2022, 5:12pm UTC](https://meta.discourse.org/t/2-8-13-security-release/247077/1 "2022-11-29T17:12:35Z")

</div>

## Discourse 2.8.13 Stable Release

Discourse strongly recommends that all sites follow the default tests-passed branch of Discourse. The “stable” branch is more focused on _lack of change_ than _lack of bugs_ - all releases, including those on tests-passed and beta are production ready.

### Changes

#### Security:

- Filter tags in user notifications for visibility [CVE-2022-46150](https://github.com/discourse/discourse/security/advisories/GHSA-rqvq-94h8-p5wv)

#### Bug fix:

- Backport invite fixes from main
- When filtering tags for visibility, respect tag group permissions