Skip to content

project-nomad

Productivity & Wikis

Project N.O.M.A.D, is a self-contained, offline survival computer packed with critical tools, knowledge, and AI to keep you informed and empowered—anytime, anywhere.

TypeScript Latest v1.32.1 · 7d ago Security brief →

Features

  • AI chat with document upload and semantic search (powered by Ollama & Qdrant)
  • Offline Wikipedia, medical references, ebooks via Kiwix
  • Khan Academy education platform with progress tracking via Kolibri
  • Downloadable offline maps through ProtoMaps

Recent releases

View all 32 releases →
No immediate action
v1.32.1 Mixed

KB focus + Docker logs + Qdrant optimization

Review required
v1.32.0 Mixed
RCE / SSRF

AI security, AMD GPU, KB ingest

v1.31.1 Breaking risk
Security fixes
  • SSRF vulnerability in map file download with stricter URL validation and private IP blocking (CWE-918)
  • Backend error message sanitization to prevent information disclosure (CWE-209)
Notable features
  • AI model download cancellation with consistent progress UI
  • Downloads staged to .tmp files and atomically renamed
  • ZIM batch embedding pipeline fixes
Full changelog

Version 1.31.1 - April 21, 2026

Features

Bug Fixes

  • AI Assistant: In-progress model downloads can now be cancelled properly and the progress UI now matches that of file downloads. Thanks @chriscrosstalk for the contribution!
  • AI Assistant: Fixed an issue where the AI Assistant settings page could crash if a model object did not have a details property. Thanks @hestela for the fix!
  • AI Assistant: Fixed an issue with non-embeddable files being queued for embedding and flooding logs with errors. Thanks @sbruschke for the bug report and @chriscrosstalk for the fix!
  • AI Assistant: Fixed an issue with ZIM batch embedding using the wrong batch count and causing remaining batches to be skipped. Thanks @sbruschke for the bug report and @chriscrosstalk for the fix!
  • AI Assistant: Fixed an issue with ZIM content extraction only extracting the first-level children of the article body and thus missing a lot of content. Thanks @sbruschke for the bug report and @chriscrosstalk for the fix!
  • Disk Collector: Improved reporting for NFS mount stats and display in the UI. Thanks @bgauger and @bravosierra99 for the contribution!
  • Downloads: Downloads are now staged to .tmp files and atomically renamed upon completion to prevent issues with incomplete/corrupt files. Thanks @artbird309 for the contribution!
  • Downloads: Removed a duplicate error listener and improved stability when handling Range requests for file downloads. Thanks @jakeaturner for the contribution!
  • Downloads: Added improved handling for corrupt ZIM file downloads and removed duplicate Ollama download logs. Thanks @aegisman for the contribution!
  • Security: Closed a potential SSRF vulnerability in the map file download functionality by implementing stricter URL validation and blocking private IP ranges. Thanks @LuisMIguelFurlanettoSousa for the fix!
  • Security: Sanitized error messages from the backend to prevent potential information disclosure. Thanks @LuisMIguelFurlanettoSousa for the fix!
  • UI: Fixed an issue with broken pagination for the Content Explorer that could cause some users to see a "No records found" message indefinitely. Thanks @johno10661 for the bug report and @chriscrosstalk for the fix!
  • UI: Fixed an issue where all storage devices could report as "NAS Storage" regardless of actual type. Thanks @bgauger for the fix!

Improvements

  • AI Assistant: Now uses the currently loaded model for query rewriting and chat title generation for improved performance and consistency. Thanks @hestela for the contribution!
  • AI Assistant: When a remote Ollama URL is configured, the Command Center will now attempt to stop NOMAD's local Ollama container to free up resources and avoid confusion. Thanks @chriscrosstalk for the contribution!
  • Dependencies: Updated various dependencies to close security vulnerabilities and improve stability
  • Docs: Added a "Community Add-Ons" page to the documentation to highlight some of the amazing community contributions that have been made since launch. Thanks @chriscrosstalk for the contribution!
  • Privacy: Added the appropriate environment variable to disable telemetry for the Qdrant container. Note that this will only take effect on new installations of if the Qdrant container is force re-installed on existing installations. Thanks @berkdamerc for the find and @chriscrosstalk for the contribution!

📝 All Changes

  • ci: ensure tags are force fetched on semantic release (bd20ba8)
  • docs: update release notes (5cbe6f5)
  • fix(rag): repair ZIM embedding pipeline (sync filter, batch gate, DOM walk) (#745) (216509a)
  • fix(ZIM): accumulate across Kiwix pages to prevent empty Content Explorer (#746) (810a70a)
  • fix(AI): stop local nomad_ollama container when remote Ollama is configured (#744) (6646b34)
  • fix(UI): gate NAS Storage label on network filesystem type (#749) (33727c7)
  • fix(qdrant): disable anonymous telemetry by default (#747) (0c76a19)
  • docs: add Community Add-Ons page with field manuals + W3Schools packs (#753) (0565564)
  • docs: update release notes (b7b3bf0)
  • build(deps): bump lodash from 4.17.23 to 4.18.1 in /admin (#643) (7ec3d79)
  • build(deps-dev): bump vite from 6.4.1 to 6.4.2 in /admin (#677) (b6bb0f2)
  • build(deps): bump @adonisjs/http-server from 7.8.0 to 7.8.1 in /admin (#724) (92b6f3c)
  • build(deps): bump protobufjs from 7.5.4 to 7.5.5 in /admin (#737) (6ec0678)
  • build(deps): bump protocol-buffers-schema from 3.6.0 to 3.6.1 in /admin (#736) (56dbf95)
  • build(deps): bump axios from 1.13.5 to 1.15.0 in /admin (#708) (5f0463b)
  • build(deps): bump follow-redirects from 1.15.11 to 1.16.0 in /admin (#729) (540c0ab)
  • fix(AI): allow cancelling in-progress model downloads and ensure consistent progress UI (#701) (6c33a96)
  • fix(security): SSRF validation for map downloads and error sanitization (CWE-918, CWE-209) (#552) (806b2c1)
  • fix(Downloads): remove duplicate err listnr and improv Range req stability (2b8c847)
  • fix(downloads): stage downloads to .tmp to prevent Kiwix loading partial files (8d026da)
  • fix(disk-display): show NAS Storage label in fsSize fallback path (151b454)
  • fix(disk-collector): fix storage reporting for NFS mounts (84399b1)
  • fix: prevent ZIM corrupt file crash and deduplicate Ollama download logs (#741) (c8cb79a)
  • fix(AI): qwen2.5 loading on every chat message (#649) (6510f42)
  • fix(AI): add null check to model name (#645) (4d86616)
v1.31.0 New feature
Breaking changes
  • Removed Ollama Cloud support, forcing users to migrate to supported remote hosts
Security fixes
  • Key validation added to the settings read API endpoint
  • URL validation for ZIM downloads improved to prevent SSRF vulnerabilities
Notable features
  • Remote AI models can run on separate hardware via compatible OpenAI hosts
  • EPUB files are now embeddable in the Knowledge Base
  • Map viewers support custom location markers with persisted database
v1.30.3 Bug fix

Fixed benchmark scoring for below-average hardware, ZIM file API deletion method, Docker NVIDIA runtime detection, improved error reporting and default versions for Ollama/CyberChef, increased MySQL retry stability.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
28,094
Forks
2,737
Languages
TypeScript Shell CSS

Install & Platforms

Install via
apt docker-compose
Platforms
linux

Community & Support

Beta — feedback welcome: [email protected]