# 3.5.0.beta4 Security fix release

**URL:** https://meta.discourse.org/t/3-5-0-beta4-security-fix-release/364850
**Category:** Announcements
**Tags:** release-notes
**Created:** [May 5, 2025, 5:04pm UTC](https://meta.discourse.org/t/3-5-0-beta4-security-fix-release/364850 "2025-05-05T17:04:14Z")
**Posts on this page:** 1
**Showing post:** 1

<div class="post-metadata">

### Author: ![pmusaraj](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pmusaraj/32/119489_2.png) [@pmusaraj](https://meta.discourse.org/u/pmusaraj)
#### Post date: [May 5, 2025, 5:04pm UTC](https://meta.discourse.org/t/3-5-0-beta4-security-fix-release/364850/1 "2025-05-05T17:04:14Z")

</div>

## Security Fixes

This release includes a security fix for a data leak affecting login-required sites deployed in the timeframe between April 30 2025 noon EDT and May 2 2025, noon EDT. Private content on an instance’s homepage could become visible to unauthenticated users.

- [Private data leak on login-required Discourse sites · Advisory · discourse/discourse · GitHub](https://github.com/discourse/discourse/security/advisories/GHSA-v3h7-c287-pfg9)

---

_[View the full topic](https://meta.discourse.org/t/3-5-0-beta4-security-fix-release/364850)._