The web browser for GNOME, featuring tight integration with the desktop and a simple and intuitive user interface that allows you to focus on your web pages. If you’re looking for a simple, clean, beautiful view of the web, this is the browser for you.
Web is often referred to by its code name, Epiphany.
Screenshots
Observed history
| App | Change | Version | When ↑ |
|---|---|---|---|
| updated | 51.1 | 25 Sept 2026 |
Upstream releases
Release notes supplied by the developer. These dates are not Flathub package publication times.
51.124 Sept 2026
Bugs fixed:
- #2883 Wrong position of the suggestion popover at the first time (John Cardullo)
- #2905 Refilter, do not clear SearchEntry when using the "Clear" action in History dialog (Arak)
- #2952 (CVE-2026-94291) Epiphany allows insecure iframe through view-source / ephy-reader scheme (Michael Catanzaro)
- #2958 Bookmark search does not work when a tag is viewed (Arak)
- !2215 Pantheon: Revive about menuitem for debugging information (Ryo Nakano)
Updated translations for: German, Norwegian Nynorsk, Portuguese.
51.010 Sept 2026
Bugs fixed:
- #2617 session: Append closed tab at end if recorded position is out of bounds (John Cardullo)
- #2897 (CVE-2026-18487) Address Bar / Host Spoofing via userinfo in ephy_uri_get_decoded_host (Michael Catanzaro)
- #2931 Code Injection via ephy_web_view_get_best_web_app_icon in `data:` URI (Michael Catanzaro)
- #2934 `data` URI prettification returns invalid domain (Michael Catanzaro)
- !2144 Some fixes for EphyHistoryDialogRow (Michael Catanzaro)
Updated translations for: Basque, Danish, English (United Kingdom), French, Hungarian, Korean, Norwegian Bokmål, Serbian, Spanish, Turkish.
51~rc27 Aug 2026
Bugs fixed:
- #2898 Invalid bookmark import crashes browser (Fernando Muñoz)
- #2903 XSS/HTML injection in error page (Michael Catanzaro)
- #2921 (CVE-2026-77682) Autofill JS Code Injection via CSS Selector (Michael Catanzaro)
- #2922 (CVE-2026-77679) WebExtension XPI Path Traversal ZIPSLIP (Fernando Muñoz)
- #2928 Link clicked in another app opens in the fullscreen window during fullscreen video (Semen Fomchenkov)
- #2929 Caret in the address bar jumps to the start when I switch keyboard layout (Semen Fomchenkov)
- #2938 "Not Secure" label in the address bar is truncated and glued to the domain in translated locales (Semen Fomchenkov)
- #2940 Epiphany offers to save a password that it just autofilled itself (after CSV import) (Semen Fomchenkov)
- !2145 Update to highlight.js 11.2.0 (Michael Catanzaro)
- !2148 web-process-extension: Target active frame when generating password from context menu (John Cardullo)
- !2152 Canary: Fix WebKitGTK injected bundle path (Philippe Normand)
- !2159 Do not trigger downloads on missing MIME type or failed HTTP responses (John Cardullo)
Updated translations for: Bulgarian, Catalan, Chinese (Taiwan), Finnish, Kazakh, Lithuanian, Portuguese (Brazil), Romanian, Swedish, Uighur.
51~beta10 Aug 2026
Bugs fixed:
- #1671 Colons in URL for Epiphany's app mode are converted to "A" (John Cardullo)
- #2892 Compile failures against libnettle 4.0 (Fernando Muñoz)
- #2901 Memory leak in the core string utility function ephy_string_shorten() (Michael Catanzaro)
- #2902 Out-of-bounds crash/assert failure in ephy_json_array_get_string_with_default (Michael Catanzaro)
- #2904 Invalid view-source: crashes browser (John Cardullo)
- !2079 CI: Add gobject-linter (Jan-Michael Brummer)
- !2109 add pinning support for URLs in history and overview model (John Cardullo)
- !2110 window: update message when saving a password (Michael Catanzaro)
- !2111 Remove incorrect use of G_GNUC_CONST for get_type() functions (Michael Catanzaro)
- !2112 Update highlight.js to 11.11.2 (Michael Catanzaro)
- !2113 Add libpwquality to Canary manifest (Michael Catanzaro)
- !2114 history-service: use G_SOURCE_REMOVE (Michael Catanzaro)
- !2117 fix: check for invalid icon (Fernando Munoz)
- !2121 Fix code style check (Michael Catanzaro)
- !2125 Adjust Reader Mode Line Spacing (John Cardullo)
- !2130 view-source-handler: fix crash when loading invalid URI (jcardullo)
- !2134 Fix CI failures (Jan-Michael Brummer)
- !2136 Canary: Disable WebRTC for now (Philippe Normand)
- !2138 Reland property registration code style changes (Michael Catanzaro)
- !2139 ci: move check-potfiles to lint stage (Michael Catanzaro)
- !2140 ci: ignore blueprint-compiler failures during style check (Michael Catanzaro)
- !2141 Canary: Re-enable WebRTC (Philippe Normand)
Updated translations for: Basque, Belarusian, Bulgarian, Catalan, Chinese (China), Czech, Dutch, Galician, Georgian, German, Hebrew, Indonesian, Italian, Kazakh, Norwegian Bokmål, Occitan (post 1500), Persian, Romanian, Russian, Slovenian, Ukrainian.