# 3.4.6: Security fix release

**URL:** https://meta.discourse.org/t/3-4-6-security-fix-release/370631
**Category:** Announcements
**Tags:** release-notes
**Created:** [June 25, 2025, 3:38am UTC](https://meta.discourse.org/t/3-4-6-security-fix-release/370631 "2025-06-25T03:38:49Z")
**Posts on this page:** 1
**Showing post:** 1

<div class="post-metadata">

### Author: ![hugh](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/hugh/32/336717_2.png) [@hugh](https://meta.discourse.org/u/hugh)
#### Post date: [June 25, 2025, 3:38am UTC](https://meta.discourse.org/t/3-4-6-security-fix-release/370631/1 "2025-06-25T03:38:49Z")

</div>

## Discourse 3.4.6 Stable Release

Discourse strongly recommends that all sites follow the default tests-passed branch of Discourse. The “stable” branch is more focused on _lack of change_ than _lack of bugs_ - all releases, including those on tests-passed and beta are production ready.

## Security Updates

This release includes fixes for these security issues reported by our community and [HackerOne](https://hackerone.com/discourse).

- [Users are able to see their own whispers even after being removed from a group that has been configured to see whispers · Advisory · discourse/discourse · GitHub](https://github.com/discourse/discourse/security/advisories/GHSA-79qw-r73r-69gf)

---

_[View the full topic](https://meta.discourse.org/t/3-4-6-security-fix-release/370631)._