# 3.1.1: Security and bug fix release

**URL:** https://meta.discourse.org/t/3-1-1-security-and-bug-fix-release/278760
**Category:** Announcements
**Tags:** release-notes
**Created:** [September 12, 2023, 9:52pm UTC](https://meta.discourse.org/t/3-1-1-security-and-bug-fix-release/278760 "2023-09-12T21:52:31Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [September 12, 2023, 9:52pm UTC](https://meta.discourse.org/t/3-1-1-security-and-bug-fix-release/278760/1 "2023-09-12T21:52:31Z")

</div>

## Discourse 3.1.1 Stable Release

Discourse strongly recommends that all sites follow the default tests-passed branch of Discourse. The “stable” branch is more focused on _lack of change_ than _lack of bugs_ - all releases, including those on tests-passed and beta are production ready.

## Changes

### New Features

- Add silence reason dropdown to admin penalty reason

### Bug Fixes

- Tests
- Ensure service-worker cache is cleaned correctly (stable) ([23205](https://github.com/discourse/discourse/pull/23205))
- Compact tag picker input not focused in iOS (#22922) ([23090](https://github.com/discourse/discourse/pull/23090))
- Poll breakdown regressions ([22957](https://github.com/discourse/discourse/pull/22957))
- Make poll breakdown modal closable again ([22953](https://github.com/discourse/discourse/pull/22953))

### Performance

- Improve performance of queries when loading a topic list (#22949) ([22950](https://github.com/discourse/discourse/pull/22950))

### Security Changes

- Limit number of drafts per user and length of `draft_key` [CVE-2023-38706  
 ](https://github.com/discourse/discourse/security/advisories/GHSA-7wpp-4pqg-gvp8)
- Limit name field length of TOTP authenticators and security keys [CVE-2023-40588  
 ](https://github.com/discourse/discourse/security/advisories/GHSA-2hg5-3xm3-9vvx)
- Reduce maximum size of SVG sprite cache to prevent DoS [CVE-2023-41043  
 ](https://github.com/discourse/discourse/security/advisories/GHSA-28hh-h5xw-xgvx)
- Add limits for themes and theme assets [CVE-2023-41042](https://github.com/discourse/discourse/security/advisories/GHSA-2fq5-x3mm-v254)