Frigate NVR Updates: Security Fixes and Dependency Overhaul
A single miscellaneous fixes pull request closed a session security hole and several camera data mix-ups, while a coordinated dependency upgrade across build tools and detector support reset the foundation for the web and hardware stack.
Duration: PT2M19S
Episode overview
This episode is a short developer briefing from Frigate NVR Updates.
It explains recent repository work in plain language.
- Show: Frigate NVR Updates
- Published: 2026-09-15T13:15:59Z
- Audio duration: PT2M19S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good day, and welcome to Frigate NVR Updates for September 15th, 2026.
The standout today is pull request 24352, Josh Hawkins's miscellaneous fixes batch. It's the most consequential single change: a security gap where a deleted user role could still ride on a valid session token and access every camera. Auth now rechecks the role against config on every refresh. The same PR fixed a…
The second theme is a coordinated tooling and dependency refresh. PR 24326 moved the web project to ESLint 10's flat config, which required real code fixes, not just config changes, including dropping dead disable directives and cleaning up error handling. PR 24324 followed with a broad dependency bump: Vite 8,…
On the hardware side, PR 24327 renamed the Hailo detector key to simplify support, and a new pull request, 24336, proposes adding a DeepX NPU detector, still under review. Separately, PR 24331 is addressing URL encoding issues in go2rtc restreaming, currently open with active discussion.
What to remember: if you're running custom roles, expect stricter session enforcement now. If you maintain the web build, the ESLint and Vite upgrades mean lint and build behavior have shifted meaningfully, not…
Th…
Nearby episodes from Frigate NVR Updates
- Weekly Recap - Release Prep Meets Frontend Overhaul
- Dependency Cleanup and AI Description Reliability
- 0.19 Groundwork and a Frontend Cleanup Push
- 0.18 Ships, 0.19 Begins
- Face Recognition Gets a Rework and a Quick Follow-Up Fix
- Birdseye Flexibility Fix
- Visibility and Resilience Improvements
- Weekly Recap - System Health, Exports, and Hardware Reliability