This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+1 more
Affected surfaces
Summary
AI summaryONVIF network discovery and per‑camera RTSP transport selection (TCP/UDP) now available.
Full changelog
Full Changelog: https://github.com/spupuz/VibeNVR/compare/v1.20.4...v1.21.0
Release v1.21.0
This release brings highly requested networking capabilities to VibeNVR, drastically improving camera discovery and streaming stability, alongside strict privacy enhancements.
🚀 New Features
- ONVIF Network Discovery & RTSP Scanner: Adding cameras is now effortless. The new intuitive scanner actively searches your local network for ONVIF-compatible devices and securely iterates through common RTSP ports to detect video streams dynamically, providing a one-click import experience.
- RTSP Transport Protocol Toggle (TCP/UDP): Introduced native support for selecting the RTSP transport layer (
TCPorUDP) on a per-camera basis. This ensures maximum compatibility: select TCP for stable feeds over imperfect routers, or UDP for the lowest possible latency on local network segments.
🛡️ Security & Privacy
- Cloudflare Analytics Engine Integration: Full migration of anonymous telemetry away from external fallbacks like Scarf.sh.
- Scarf Telemetry Deprecation: Removed all legacy Scarf pixel reporting logic from both the Python
telemetry_serviceand the React Settings frontend. Telemetry is now 100% processed internally via edge workers, guaranteeing that no IP addresses are ever accessed or parsed by third-party tracking services.
🔧 Fixes & Refactoring
- Re-factored internal component references and settings APIs to mirror the architectural shift toward the secure Cloudflare telemetry module.
- Minor cleanups in package.json configurations to bump the unified backend/frontend version across the monorepo.
Thank you to everyone testing the beta!
Security Fixes
- Scarf telemetry logic removed; all anonymous telemetry now processed internally via Cloudflare edge workers, ensuring no third‑party access to IP addresses.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About spupuz/VibeNVR
All releases →Related context
Related tools
Earlier breaking changes
- v1.28.3 Must update docker-compose.yml with TZ variable for all services
Beta — feedback welcome: [email protected]