[New release] wallabag 2.5.4

February 09, 2023

⚠️ This is a security release of wallabag.

To update your instance, just run make update.

🤝 A little reminder that you can support our work on wallabag by sponsoring us on Liberapay or subscribe on wallabag.it. Thanks!

We added a limitation on adding tags from the entry page : only 4 tags at a time and a max length of 40 characters.

What's Changed

Fix release script by @j0k3r in https://github.com/wallabag/wallabag/pull/6275
Fix (CVE-2023-0734) adding tag to entries from other people by @j0k3r in https://github.com/wallabag/wallabag/pull/6290
Fix (CVE-2023-0736) XSS on username on share page by @j0k3r in https://github.com/wallabag/wallabag/pull/6288
Fix (CVE-2023-0735 & CVE-2023-0737) CSRF on user deletion by @j0k3r in https://github.com/wallabag/wallabag/pull/6289
Prepare 2.5.4 by @j0k3r in https://github.com/wallabag/wallabag/pull/6291

Full Changelog: https://github.com/wallabag/wallabag/compare/2.5.3...2.5.4

Download wallabag 2.5.4

To download, install/upgrade wallabag, please read our Downloads page.

Need help?

We are on Gitter and on IRC, ping us! You can also open a new issue on GitHub.

How can you help us?

By using wallabag, by reporting bugs, by translating wallabag and its documentation, by talking about wallabag to your friends, ... You can help us via Liberapay or PayPal.