# 3.5.1: 보안 및 유지보수 릴리스

**URL:** https://meta.discourse.org/t/3-5-1-security-and-maintenance-release/383511
**Category:** Announcements
**Tags:** release-notes
**Created:** [9월 30, 2025, 2:59오전 UTC](https://meta.discourse.org/t/3-5-1-security-and-maintenance-release/383511 "2025-09-30T02:59:22Z")
**Posts on this page:** 1
**Showing post:** 1

<div class="post-metadata">

### Author: ![hugh](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/hugh/32/336717_2.png) [@hugh](https://meta.discourse.org/u/hugh)
#### Post date: [9월 30, 2025, 2:59오전 UTC](https://meta.discourse.org/t/3-5-1-security-and-maintenance-release/383511/1 "2025-09-30T02:59:22Z")

</div>

## Discourse 3.5.1 안정 버전 출시

Discourse에서는 모든 사이트가 Discourse의 기본 tests-passed 브랜치를 따를 것을 강력히 권장합니다. “stable” 브랜치는 _버그의 부재_보다 _변화의 부재_에 더 중점을 두며, tests-passed와 beta를 포함한 모든 릴리스는 프로덕션 환경에서 사용할 수 있는 상태입니다.

## 보안 업데이트

이 릴리스에는 커뮤니티와 [HackerOne](https://hackerone.com/discourse)에서 보고한 다음 보안 문제 수정 사항이 포함되어 있습니다.

- [XSS when quoting chat messages via channel title and thread title in RTE · Advisory · discourse/discourse · GitHub](https://github.com/discourse/discourse/security/advisories/GHSA-7p47-8m82-m2vf)
- [Insecure Direct Object Reference via AI Suggestions · Advisory · discourse/discourse · GitHub](https://github.com/discourse/discourse/security/advisories/GHSA-32v2-x274-vfhr)
- [Backup restore meta-command injection leading to cross-site data access in multisite environments · Advisory · discourse/discourse · GitHub](https://github.com/discourse/discourse/security/advisories/GHSA-7xjr-4f4g-9887)

---

_[View the full topic](https://meta.discourse.org/t/3-5-1-security-and-maintenance-release/383511)._