emoncms

v11.15.6 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Monitoring & Metrics

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

dashboards emoncms energy-monitor openenergymonitor php sustainability

ReleasePort's take

Moderate signal

editorial:auto 1mo

Version 11.15.6 eliminates the MD5 library in favor of native SHA‑256 and upgrades all UI code from Vue 2 to Vue 3, while also removing several unused dependencies.

Why it matters: The migration to Vue 3 (severity 80) requires updating any Vue 2 components before upgrade; replacing MD5 with SHA‑256 (severity 50) enhances security for hashing operations.

Summary

AI summary

Removed MD5 library, migrated UI to Vue 3, and eliminated unused libraries such as Moment.js, Flot, Grid.js, Table.js, Hammer.js, and legacy SVG icons.

Changes in this release

Type	Severity	Summary	CVE
Breaking	High	Remove Vue 2; all UI now uses Vue 3. Remove Vue 2; all UI now uses Vue 3. Source: llm_adapter@2026-06-09 Confidence: low	—
Feature
Feature	Medium	Improve schedule test response. Improve schedule test response. Source: granite4.1:30b@2026-06-09-audit Confidence: low	—
Feature	Low	Use custom datetimepicker in graph UI. Use custom datetimepicker in graph UI. Source: granite4.1:30b@2026-06-09-audit Confidence: low	—
Feature	Low	Increase max datapoints allowed. Increase max datapoints allowed. Source: granite4.1:30b@2026-06-09-audit Confidence: low	—
Dependency
Dependency	Medium	Remove Moment.js library. Remove Moment.js library. Source: llm_adapter@2026-06-09 Confidence: high	—
Dependency	Medium	Remove Hammer.js, Grid.js, Table.js, and legacy Flot library files. Remove Hammer.js, Grid.js, Table.js, and legacy Flot library files. Source: llm_adapter@2026-06-09 Confidence: high	—
Dependency	Medium	Remove MD5 library; use native SHA‑256. Remove MD5 library; use native SHA‑256. Source: llm_adapter@2026-06-09 Confidence: low	—
Dependency	Medium	Remove Hammer.js (unused). Remove Hammer.js (unused). Source: granite4.1:30b@2026-06-09-audit Confidence: low	—
Dependency	Medium	Remove Grid.js, no longer used by dashboard module. Remove Grid.js, no longer used by dashboard module. Source: granite4.1:30b@2026-06-09-audit Confidence: low	—
Dependency	Medium	Remove Table.js and responsive‑linked‑tables.js. Remove Table.js and responsive‑linked‑tables.js. Source: granite4.1:30b@2026-06-09-audit Confidence: low	—
Performance
Performance	Low	Refine schedule UI appearance. Refine schedule UI appearance. Source: granite4.1:30b@2026-06-09-audit Confidence: low	—
Performance	Low	Adjust card border radius and bold graph icon. Adjust card border radius and bold graph icon. Source: granite4.1:30b@2026-06-09-audit Confidence: low	—
Performance	Low	Use minified version of Flot canvas. Use minified version of Flot canvas. Source: granite4.1:30b@2026-06-09-audit Confidence: low	—
Performance	Low	Remove old SVG icons; load CSS‑based SVG icons. Remove old SVG icons; load CSS‑based SVG icons. Source: granite4.1:30b@2026-06-09-audit Confidence: low	—
Bugfix
Bugfix	Medium	Fix schedule builder bug. Fix schedule builder bug. Source: llm_adapter@2026-06-09 Confidence: high	—
Bugfix	Medium	Fix menu in graph mode. Fix menu in graph mode. Source: llm_adapter@2026-06-09 Confidence: high	—
Bugfix	Medium	Fix path issues. Fix path issues. Source: llm_adapter@2026-06-09 Confidence: high	—
Bugfix	Medium	Fix hide input/feed filters when inputs/feeds are selected. Fix hide input/feed filters when inputs/feeds are selected. Source: llm_adapter@2026-06-09 Confidence: high	—
Bugfix	Medium	Fix input and feed list page sticky controls behavior on mobile. Fix input and feed list page sticky controls behavior on mobile. Source: llm_adapter@2026-06-09 Confidence: high	—
Bugfix	Medium	Fix embed mode issues. Fix embed mode issues. Source: llm_adapter@2026-06-09 Confidence: high	—
Refactor
Refactor	Medium	Modify Flot.js for version 5.1.0. Modify Flot.js for version 5.1.0. Source: granite4.1:30b@2026-06-09-audit Confidence: low	—
Refactor	Low	Update version information. Update version information. Source: granite4.1:30b@2026-06-09-audit Confidence: low	—
Refactor	Low	Remove use of Table.js from schedule UI. Remove use of Table.js from schedule UI. Source: granite4.1:30b@2026-06-09-audit Confidence: low	—
Refactor	Low	Split out Bootstrap utility functions. Split out Bootstrap utility functions. Source: granite4.1:30b@2026-06-09-audit Confidence: low	—
Refactor	Low	Introduce new Vue3 CSS‑grid based input and feed lists (v12). Introduce new Vue3 CSS‑grid based input and feed lists (v12). Source: granite4.1:30b@2026-06-09-audit Confidence: low	—

Full changelog

fix schedule builder bug
improve schedule test response
update version
schedule ui refinements
schedule builder
remove md5 library use native sha256
remove vue2, all ui is vue3 now
update version
fix menu in graph mode
fix path
update version
version 5.1.0 modified of flot js
custom datetimepicker used by graph
card border radius and bold graph icon
remove flot merged from vis
use .min version of flot canvas
remove all unused legacy flot library files
increase contrast of card header
increase max datapoints
remove moment js
remove moment js
update version
fix embed mode
remove hammer.min.js - unused
update version
remove grid js, no longer used by dashboard module
remove tablejs and responsive-linked-tables.js
remove use of table.js from schedule ui
remove old svg icons
css loaded svg icons
split out bootstrap utils
update copyright and security mds
l2 menu active accent
move js locations
fix path
clean up and move css/js to new locations
fix hide input/feed filters when inputs/feeds are selected
fix input and feed list page sticky controls behaviour on mobile
Merge remote-tracking branch 'origin/master' into v12_input_and_feed_lists
new vue3 css grid based input and feed lists
v12 part

Full commit diff

Breaking Changes

Removed md5 library; hash functions now use native sha256.
Removed Vue 2 usage; all UI components are now built with Vue 3.
Removed Moment.js library from the codebase.
Removed Flot library files and merged changes into vis; eliminated flot canvas .min version usage.
Removed Grid.js, Table.js, and responsive-linked-tables.js as they are no longer used by the dashboard module.
Removed hammer.min.js which was unused.
Removed old SVG icons; switched to CSS‑loaded SVG icon system.

Security Fixes

Updated copyright and security markdown files to reflect current best practices.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track emoncms

Get notified when new releases ship.

About emoncms

Web-app for processing, logging and visualising energy, temperature and other environmental data

All releases →