Ghost Release: 5.123.0

TL;DR

Ghost v5.123.0 brings important bug fixes for member-related functionality, including fixes for member filters, unsubscribe links in comment notifications, and tier-gated post previews. These improvements enhance the user experience for both site administrators and members.

Highlight of the Release

• Fixed member filter UI to prevent breaking when accessed before data loads
• Corrected unsubscribe links in comment notification emails
• Improved preview functionality for tier-gated posts

Migration Guide

No migration steps are required for this update. The fixes are applied automatically when upgrading to v5.123.0.

Upgrade Recommendations

This update is recommended for all Ghost users, especially those who:

• Use member filtering functionality
• Have enabled comments on their site
• Publish tier-gated content

The release contains important bug fixes that improve the reliability of member management features and fix a security issue with comment notification emails.

Bug Fixes

Member Filter UI Fix

Fixed an issue where the member filter UI would break if accessed before the required data had fully loaded. The update adds:

• A spinner in the filter dialog during data loading
• Disabled action buttons during the loading state
• Safety checks to prevent undefined data access

Comment Notification Email Fix

Fixed a security issue where the unsubscribe link in comment notification emails was incorrectly using the UUID of the reply author instead of the notification recipient. This meant users were unsubscribing the wrong person from notifications. The fix ensures:

• The correct UUID is used in the profile URL sent in emails
• The UUID now properly belongs to the person receiving the email

Tier-Gated Post Preview Fix

Fixed an issue where it was not possible to preview the entire content of a post with "Specific Tiers" visibility setting as a member who has access. The update:

• Adds all active paid tiers to the context.member object on the preview route when member_status=paid is selected
• Allows users to preview the entire post without the paywall when selecting "Paid member" from the dropdown in admin

New Features

No significant new features were introduced in this release. The focus was on bug fixes and improvements to existing functionality.

Security Updates

Fixed a security issue in comment notification emails where the unsubscribe link was incorrectly using the UUID of the reply author instead of the notification recipient. This could potentially allow users to unintentionally unsubscribe other users from notifications. The fix ensures that the correct UUID is used in the profile URL sent in emails.

Performance Improvements

This release does not include any specific performance improvements. The changes are focused on bug fixes and functional improvements rather than performance enhancements.

Impact Summary

Ghost v5.123.0 focuses on fixing several important bugs related to member management and content access. The most significant fix addresses a security issue with unsubscribe links in comment notification emails, where the wrong user could be unsubscribed. Additionally, the update improves the member filter UI to handle loading states properly and fixes preview functionality for tier-gated posts. These changes enhance the reliability of core member-related features without introducing any breaking changes or requiring migration steps.

Full Release Notes