Vue 2.6 NES Release Notes

Version 2.6.19 (NES) - October 4, 2024

Bug Fixes

• template-compiler, server-renderer, webpack-plugin: Depend on secure lodash@4.17.21 instead of single-function legacy packages lodash.template@4.5.0 and lodash.uniq@4.5.0

Version 2.6.18 (NES) - July 25, 2024

Bug Fixes

• Improve parser processing for <script>, <style>, and <textarea> tags to patch CVE-2024-9506 (low-severity vulnerability)

Version 2.6.17 (NES) - June 3, 2024

Bug Fixes

• template-compiler: Sanitize ASTNodes when constructing AST tree to patch CVE-2024-6783 (medium-severity vulnerability)

Version 2.6.16 (NES) - October 18, 2023

Bug Fixes

• Allow Dev-only Vue Package Version comparison logic to work with NES naming convention (for example, when comparing the template-compiler to the vue runtime, the "version")

Version 2.6.15 (NES) - August 16, 2023

Notes

• This release represents the NES forking point from OSS Vue 2.6.14 and contains no functional changes
• Only non-functional files (licensing, copyright, packaging, etc) required for NES distribution were changed

Bug Fixes

• None