> ## Content Index
> Fetch the complete content index at: https://ghost.org/changelog/llms.txt
> Use this file to discover other available public pages before exploring further.

# Ghost 0.3.3 Maintenance and Security Release
- URL: https://ghost.org/changelog/ghost-0-3-3-maintenance-and-security-release/
- Published: 2013-10-18T12:16:08.000Z
- Updated: 2021-01-11T01:30:39.000Z
- Author: John O'Nolan
- Tags: Release, #changelog, #ghost

*Today we are releasing Ghost 0.3.3 - which is a critical maintenance and security release, recommended for all users.*

It's been an amazing (insane) week at Ghost HQ, and part of that has lead to us fixing a number of critical issues within Ghost core which we are releasing today as Ghost 0.3.3.

As well as fixing a couple of interaction bugs, this update fixes a number of critical security vulnerabilities and, as such, it is recommended that all users upgrade to 0.3.3 right away.

- **\[Fixed\]** Broken URL-based image uploads on settings screens
- **\[Fixed\]** Console error on content screen with no posts
- **\[Fixed\]** Empty previews on content screen after scroll
- **\[Fixed\]** Private data appearing in API response
- **\[Fixed\]** Various firefox display bugs
- **\[Fixed\]** Various security issues
- **\[Added\]** CSRF protection across the admin
- **\[Updated\]** Bookshelf to 0.5.7
- **\[Updated\]** Knex to 0.4.11

We want to thank our contributors for their [responsible disclosure](https://github.com/TryGhost/Ghost/blob/master/SECURITY.md?ref=ghost.org) of these issues directly to our security team.

## How To Upgrade

Upgrade documentation can be found at

[https://ghost.org/docs/update/](https://ghost.org/docs/update/?ref=ghost.org)

*All users can now download today's release, Ghost 0.3.3, from the Ghost.org [download](https://ghost.org/docs/install/?ref=ghost.org) page.*