2.5.4 - 2023-02-07

⚠️ This is a security release of wallabag.

To update your instance, just run make update.

🤝 A little reminder that you can support our work on wallabag by sponsoring us on Liberapay or subscribe on wallabag.it. Thanks!

We added a limitation on adding tags from the entry page : only 4 tags at a time and a max length of 40 characters.

What's Changed

• Fix release script by @j0k3r in #6275
• Fix (CVE-2023-0734) adding tag to entries from other people by @j0k3r in #6290
• Fix (CVE-2023-0736) XSS on username on share page by @j0k3r in #6288
• Fix (CVE-2023-0735 & CVE-2023-0737) CSRF on user deletion by @j0k3r in #6289
• Prepare 2.5.4 by @j0k3r in #6291

Full Changelog: 2.5.3...2.5.4