v3.2.2 v2.0.5-beta
medium risk
nari-labs/dia2Sep 5, 2026 → Sep 7, 20262 days between releases
What's New
Fixed security vulnerability and added user preference management features
New Features
- Users can set default view mode and thumbnail size from Profile settings
- Admins can edit all profile preference defaults for existing users from the user management panel
Improvements
- Resolved moderate security vulnerability where public metadata APIs returned file content to anonymous visitors
- Implemented Content Security Policy (CSP) security hardening
Bug Fixes
- Fixed infinite loading spinners on root and login paths following CSP security hardening
- Fixed darkmode styling bug where background wouldn't respect configured settings when not logged in
- Fixed styling bug where padding was missing from right side of listing view
- Fixed tilde paths for sources not being properly expanded
- Fixed tooltip not showing up for some circumstances on mobile
Upgrade Notes
Address the security vulnerability and CSP hardening. Be aware that CSP changes may require adjustments to your browser or network policies.
The Two Releases
v3.2.2
v3.2.2
Sep 5, 2026· 2 months ago
Minimal release notes: "Release notes: https://thewh1teagle.github.io/vibe/changelog/3.2.2 Signed and notarized on macOS and Windows."
Full release notesv2.0.5-beta
v2.0.5-beta
Sep 7, 2026· 1 month ago
A beta release introducing user preference management features and fixing critical security vulnerabilities regarding public metadata access.
Full release notes