- Fix SSRF vulnerability in the oEmbed endpoint.
- Improve server‑side request handling to block unauthorized external calls.
- Ensure safe embedding of external content.
5.130.5
Official Ghost changelog summary with source attribution, release tags, and community reactions.
Track this Ghost release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this Ghost release note into a weekly digest for the tools you actually use.
Create digestMore Ghost changelog updates
Updated Source to v1.7.2 and Casper to v5.12.2 themes
Added Docker secrets support and new React member/tag details screens
Fixed UI issues: corrected contrast text color on light backgrounds and resolved admin toolbar redirect loops on subdirectory sites.