spupuz/VibeNVR

v1.31.1 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 4d Media Servers

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

ffmpeg lightweight local-storage nvr opensource privacy

+1 more

video-surveillance

Affected surfaces

auth

Summary

AI summary

Updates 🙌 Contributors, 🛠️ Key Improvements, and 🚀 Release v1.31.1 across a mixed release.

Full changelog

🚀 Release v1.31.1

📝 Summary

This release brings crucial performance optimizations and security improvements to VibeNVR. We've focused on hardening the OAuth flow, optimizing database queries for camera imports and event deletions, and improving UI accessibility for a more polished user experience.

🛠️ Key Improvements

⚡ Performance: Resolved significant N+1 query bottlenecks during MotionEye camera imports and bulk event deletions, resulting in faster and more stable database operations at scale.
🛡️ Security: Implemented strict rate limiting on OAuth endpoints (/login, /callback, /unlink, /logout) to protect against brute-force and denial-of-service attacks.
🎨 Aesthetics & Accessibility: Enhanced the groups manager with proper keyboard navigation (Enter/Space to toggle) and highly visible focus rings for improved accessibility compliance.

🙌 Contributors

@spupuz: 🎨 Palette: [UX improvement] Add keyboard accessibility to group selection
@spupuz: ⚡ Bolt: [performance improvement] (Event endpoint bulk delete optimization)
@spupuz: 🛡️ Sentinel: [HIGH] Fix missing rate limiting on OAuth endpoints
@spupuz: ⚡ Bolt: Fix N+1 Query in MotionEye Import