# Release v3.5.3: Security and maintenance release

**URL:** https://meta.discourse.org/t/release-v3-5-3-security-and-maintenance-release/392357
**Category:** Announcements
**Tags:** release-notes
**Created:** [December 30, 2025, 3:07pm UTC](https://meta.discourse.org/t/release-v3-5-3-security-and-maintenance-release/392357 "2025-12-30T15:07:18Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![mcwumbly](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mcwumbly/32/103861_2.png) [@mcwumbly](https://meta.discourse.org/u/mcwumbly)
#### Post date: [December 30, 2025, 3:07pm UTC](https://meta.discourse.org/t/release-v3-5-3-security-and-maintenance-release/392357/1 "2025-12-30T15:07:18Z")

</div>

## Security Updates

This release includes fixes for these security issues reported by our community and [HackerOne](https://hackerone.com/discourse).

- Users are able to find users by name even when `enable_names` is off [(CVE-2025-64528)](https://github.com/discourse/discourse/security/advisories/GHSA-c59w-jwx7-34v4)