⚠️ This is a security release of wallabag.

To update your instance, just run make update.

🤝 A little reminder that you can support our work on wallabag by sponsoring us on Liberapay or subscribe on wallabag.it. Thanks!

We added a limitation on adding tags from the entry page : only 4 tags at a time and a max length of 40 characters.

What's Changed

• Fix release script by @j0k3r in https://github.com/wallabag/wallabag/pull/6275
• Fix (CVE-2023-0734) adding tag to entries from other people by @j0k3r in https://github.com/wallabag/wallabag/pull/6290
• Fix (CVE-2023-0736) XSS on username on share page by @j0k3r in https://github.com/wallabag/wallabag/pull/6288
• Fix (CVE-2023-0735 & CVE-2023-0737) CSRF on user deletion by @j0k3r in https://github.com/wallabag/wallabag/pull/6289
• Prepare 2.5.4 by @j0k3r in https://github.com/wallabag/wallabag/pull/6291

Full Changelog: https://github.com/wallabag/wallabag/compare/2.5.3...2.5.4

Download wallabag 2.5.4

To download, install/upgrade wallabag, please read our Downloads page.

Need help?

We are on Gitter and on IRC, ping us! You can also open a new issue on GitHub.

How can you help us?

By using wallabag, by reporting bugs, by translating wallabag and its documentation, by talking about wallabag to your friends, ... You can help us via Liberapay or PayPal.