Here is the latest release of wallabag.

⚠️ This is a security release of wallabag.

📈 To update your instance, just run make update. Don't forget to make a backup of your instance (database and files).

🤝 A little reminder that you can support our work on wallabag by sponsoring us on Liberapay or subscribe on wallabag.it. Thanks!

Human summary

Adding protection against CSRF on several endpoints.

What's Changed

Security fix ⚠️

• Protect actions with a CSRF token by @yguedidi in https://github.com/wallabag/wallabag/commit/99c8a06594d6ee7480ce4d041ccff3025b353656 (reported as GHSA-5pm7-cp8f-p2c2)

Fixes

• Fix redirection after action in search results by @nicosomb in https://github.com/wallabag/wallabag/pull/7827
• Fix title tag filter by @nicosomb in https://github.com/wallabag/wallabag/pull/7846
• Change NB_ELEMENTS in pocket importer to 30 by @j0k3r in https://github.com/wallabag/wallabag/pull/7993
• Fix entries counter for annotated entries in the menu by @j0k3r in https://github.com/wallabag/wallabag/pull/7999

Technical stuff

• Prepare 2.6.11 release by @yguedidi in https://github.com/wallabag/wallabag/pull/8133

You can read the full changelog on GitHub.

Download wallabag 2.6.11

To download, install/upgrade wallabag, please read our downloads page.

Need help?

We are on Matrix, ping us!

You can also open a new issue on GitHub.

How can you help us?

By using wallabag, by reporting bugs, by translating wallabag and its documentation, by talking about wallabag to your friends, ...

You can also help us by donating via Liberapay.