Skip to content

spupuz/VibeNVR

v1.28.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Media Servers
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

ffmpeg lightweight local-storage nvr opensource privacy
+1 more
video-surveillance

Affected surfaces

auth rbac

Summary

AI summary

Global AI Engine unifies YOLOv8 and MobileNet SSD model selection with real-time MQTT connectivity for Home Assistant.

Full changelog

Full Changelog: https://github.com/spupuz/VibeNVR/compare/v1.27.1...v1.28.0

🚀 Release v1.28.0: The AI & Connectivity Update

📝 Summary

VibeNVR v1.28.0 is a major evolution in intelligence and system observability. We've introduced a state-of-the-art Multi-Model AI pipeline, a native MQTT service for seamless Home Assistant integration, and a completely redesigned configuration architecture. This release unifies AI management into a Global Engine Configuration, allowing users to switch between high-accuracy YOLOv8 and lightning-fast MobileNet SSD architectures with real-time engine synchronization.

🛠️ Key Improvements

🤖 Intelligence & Multi-Model Support

  • 🎯 YOLOv8 & MobileNet SSD: Native support for multiple TFLite architectures. Choose between YOLOv8 for superior precision or MobileNet SSD v2 for maximum inference speed.
  • Non-Maximum Suppression (NMS): Implemented intelligent overlap filtering for YOLO models to eliminate redundant bounding boxes.
  • 🏗️ Global AI Engine: Migrated AI Model and Hardware selection to centralized System Settings for optimized resource management and engine singleton stability.
  • 🔍 Tracking Robustness: Enhanced label readability and implemented Hysteresis (1.0s persistence) to eliminate bounding box flickering during inference.

🔌 Connectivity & Integration

  • 📡 Native MQTT Service: Real-time event reporting with Home Assistant Auto-Discovery support for binary sensors and status updates.
  • 🌐 Global Settings Sync: Real-time propagation of system-wide parameters (MQTT, AI, Throttling) from the UI to the core Video Engine.

📊 Observability & UI

  • 🎨 Dashboard Health Widgets: New real-time indicators for MQTT Connection and AI Processor status.
  • 💊 Unified Metadata UI: Harmonized pill-shaped badges for detected objects across the Dashboard and Timeline views.
  • 🛡️ Premium Aesthetics: Refined UI contrast and typography across the Settings and Camera Management pages.

🛡️ Core Stability & Security

  • 🗄️ Storage Pruning Unification: Resolved the "114% storage" discrepancy by unifying database and filesystem metrics into a reactive pruning task.
  • 🔒 RBAC Hardening: Full security audit of new global configuration endpoints ensuring strict Admin-only access.
  • 🧹 Build Hygiene: Standardized .dockerignore and .gitignore across all repositories to ensure lean production images.

📊 Release Status

  • Version: 1.28.0 (Consolidated)
  • Tag: v1.28.0
  • Engine: 🟢 Stable (v1.2.0-core)
  • Documentation: ✅ Updated & Synchronized

Security Fixes

  • RBAC hardening ensures strict Admin‑only access to new global configuration endpoints

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track spupuz/VibeNVR

Get notified when new releases ship.

Sign up free

About spupuz/VibeNVR

All releases →

Related context

Earlier breaking changes

  • v1.28.3 Must update docker-compose.yml with TZ variable for all services

Beta — feedback welcome: [email protected]