# 3.4.7: Security and maintenance release
**URL:** https://meta.discourse.org/t/3-4-7-security-and-maintenance-release/375747
**Category:** Announcements
**Tags:** release-notes
**Created:** [July 29, 2025, 3:46am UTC](https://meta.discourse.org/t/3-4-7-security-and-maintenance-release/375747 "2025-07-29T03:46:36Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@hugh](https://meta.discourse.org/u/hugh)
#### Post date: [July 29, 2025, 3:46am UTC](https://meta.discourse.org/t/3-4-7-security-and-maintenance-release/375747/1 "2025-07-29T03:46:36Z")
## Discourse 3.4.7 Stable Release
Discourse strongly recommends that all sites follow the default tests-passed branch of Discourse. The “stable” branch is more focused on _lack of change_ than _lack of bugs_ - all releases, including those on tests-passed and beta are production ready.
## Security Updates
This release includes fixes for these security issues reported by our community and [HackerOne](https://hackerone.com/discourse).
- [WebAuthn challenge not cleared from user's session after authentication · Advisory · discourse/discourse · GitHub](https://github.com/discourse/discourse/security/advisories/GHSA-hv49-93h5-4wcv)
---
### Author:  [@tgxworld](https://meta.discourse.org/u/tgxworld)
#### Post date: [July 29, 2025, 3:46am UTC](https://meta.discourse.org/t/3-4-7-security-and-maintenance-release/375747/3 "2025-07-29T03:46:36Z")
### Even more!
But wait, there’s more! We do our best to highlight new features and changes for you, but there’s always too many changes to detail. For a full list of new features, bug fixes, UX improvements, and more, be sure to review the Additional Features and Fixes listed below.
## All Features and Fixes
### Bug Fixes
- UppyUploader issues when authorized\_extensions setting is blank but authorized\_extensions\_for\_staff is not ([33424](https://github.com/discourse/discourse/pull/33424))
### Security Changes
- Clear webauthn challenge from session after authenticating