Update Feed

Wallabag 2.5.4

22 February 2023

Wallabag version 2.5.4 is now available (security release).

Upgrading to Wallabag 2.5.4

Wallabag 2.5.4 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Wallabag updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Wallabag install to test the 2.5.4 upgrade prior to applying it live. Get started managing your Wallabag installations with Installatron

What's New in Wallabag 2.5.4

2.5.4

Security

Fix (CVE-2023-0734) adding tag to entries from other people #6290
Fix (CVE-2023-0736) XSS on username on share page #6288
Fix (CVE-2023-0735 & CVE-2023-0737) CSRF on user deletion #6289

Bug Fixes and Changes

Fix release script by @j0k3r in #6275
Prepare 2.5.4 #6291

2.5.3

Security

Fix GHSA-qwx8-mxxx-mg96 b795622
Fix GHSA-mrqx-mjc4-vfh3 5ac6b6b

Bug Fixes and Changes

Update deps before 2.5.3 #6241
Prepare 2.5.3 #6267