Skip to content

Security Update & UI Enhancements!

Latest
Latest
Compare
Choose a tag to compare
@warmshao warmshao released this 29 Mar 03:37
· 12 commits to main since this release
v1.7
f4f36b4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Hello everyone,

We're happy to announce the new release of browser-use-webui! 🎉 This update brings support for new models, several improvements, and an important security fix.

  • Hotfix some issues: open multiple tabs, etc.

Here's what's new:

  • ✅ WebUI Compatibility: Updated the WebUI to be compatible with the latest browser-use==0.1.40. Remember uv pip install -r requirements.txt.
  • 🐛 Bug Fixes: Squashed several bugs to improve stability and performance.
  • 🎨 UI Optimization: Refreshed the WebUI for a cleaner, more intuitive, and aesthetically pleasing user experience.
  • 🤖 New Model Support:
    • Gemini: Added support for gemini-2.5-pro-exp-03-25. Simply input the model name directly.
    • DeepSeek: Added support for DeepSeek-V3-0324. Select the deepseek-chat option and remember to uncheck use_vision for this model.
  • ⚙️ Improved Config Handling: Reworked the WebUI config saving and loading mechanism. It's now more robust and adaptive to user configurations.

🚨 Important Security Update: 🚨

  • We have fixed a critical security vulnerability related to loading WebUI configurations using pickle. Loading untrusted pickle files can potentially lead to arbitrary code execution.
  • To mitigate this risk, we have migrated to using json for saving and loading WebUI settings. This is a much safer standard.
  • We strongly urge all users to update to v1.7 or later immediately to protect themselves. Please avoid using older versions that load configurations via pickle. Your settings should automatically migrate where possible, but backing up your old config is always wise.

Thanks to @Wh1teZe , refer to #451

Contributors

Wh1teZe
Assets 2
Loading