Frigate NVR Updates: Weekly Recap - Security Hardening & Timing Precision

This week's work centered on closing an authentication gap and fixing timestamp accuracy at recording boundaries, alongside the usual batch of miscellaneous fixes and translation updates. Maintainers also opened discussion on a Birdseye camera refactor that drew heavy review pushback.

Duration: PT2M52S

Episode overview

This episode is a short developer briefing from Frigate NVR Updates.

It explains recent repository work in plain language.

  • Show: Frigate NVR Updates
  • Published: 2026-08-10T16:05:35Z
  • Audio duration: PT2M52S

Transcript excerpt

This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.

Welcome to Frigate NVR Updates, covering August 3rd through August 10th. This week: 13 pull request activity items and 21 additional commits.

The standout story is a security fix. PR 23909 addresses a real gap in how Frigate's internal authentication worked. The system was granting anonymous admin access based on a port number read from live config, but the web server only binds its listeners once at startup. That mismatch meant a config change could…

Timing precision was the second theme this week. Two related PRs from Ersaoktaviannn tackled boundary conditions: PR 23904 fixes VOD recording selection when a requested time range's inclusive edges caused the wrong recording to be picked, and PR 23902 corrects motion search timestamps that could drift at recording…

On the day-to-day maintenance side, Josh Hawkins pushed two rounds of "miscellaneous fixes" for the 0.18 beta. PR 23898 fixed a serious front-end bug where dragging the motion search timeline handlebar quickly could exceed React's update limit and blank out the app — worst felt during motion search. That same PR…

Translation updates from Hosted Weblate continued at a steady clip, with Norwegian, Czech, Catalan, Romanian,…

One…

Nearby episodes from Frigate NVR Updates

  1. API Hardening and a Path Traversal Fix
  2. GenAI Gets More Flexible, Cleanup Follows
  3. Birdseye Gets a Rework
  4. Export Polish and GenAI Lifecycle Fix
  5. Small Fixes, Steady Maintenance
  6. Beta Cleanup and a Birdseye Rethink
  7. Localization Push and Beta Stabilization
  8. Trust Boundaries and Timing Bugs