Includes security fixes, deprecations or config changes. Read the notes; usually worth updating soon.
From the release notes
- This is a maintenance release for Frigate 0.18 that includes some security fixes.
- source scheme bypasses go2rtc exec-filter in Frigate allowing admin-authenticated RCE as root (GHSA-qjjw-3v66-279f)
- direct websocket paths allows viewers to perform RCE as root (GHSA-93xj-hg88-ffg7)
- the /auth media and stream checks classify the raw request path, not the one nginx serves (GHSA-3cxh-fj2f-h497)
Read the full official release notes →
✏️ Suggest a fix for this verdict
📬 The Weekend Patch Report
One email a week: what's safe to update, what will bite, and one practical tip for your homelab or printer.
Free, weekly, unsubscribe anytime.