Hello all,

This message is important to everyone running an instance of Wikibase including the Query Service GUI.

We just released a new version of the Wikidata Query Service GUI. This release is primarily to fix several security issues described in T238822 and T238824 (these tasks will be made public soon). These are different from the previous fix we deployed on November 7th. The fix has been successfully deployed for the Wikidata Query Service. 

In order to keep your instance safe, please make sure to update your Query Service GUI!

Git repositories, releases and currently active version docker images also include the latest fixed code (see links below). If you have a local test setup using the docker-compose example then see: https://gist.github.com/addshore/36f8d6fe2331d28ca8f70df5abda20fd

Gerrit repositories:

Docker images:

If you have any questions or issues updating your code, please let us know (you can write me an email, or ask in the Wikibase Telegram group)

Thanks for your understanding,


Léa Lacroix
Project Manager Community Communication for Wikidata

Wikimedia Deutschland e.V.
Tempelhofer Ufer 23-24
10963 Berlin

Wikimedia Deutschland - Gesellschaft zur Förderung Freien Wissens e. V.

Eingetragen im Vereinsregister des Amtsgerichts Berlin-Charlottenburg unter der Nummer 23855 Nz. Als gemeinnützig anerkannt durch das Finanzamt für Körperschaften I Berlin, Steuernummer 27/029/42207.