Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade mongoose from 4.2.4 to 6.0.12 #1123

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade mongoose from 4.2.4 to 6.0.12.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 402 versions ahead of your current version.
  • The recommended version was released 21 days ago, on 2021-10-21.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-MQUERY-1089718
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept
Prototype Pollution
SNYK-JS-MQUERY-1050858
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept
Denial of Service (DoS)
SNYK-JS-MONGODB-473855
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Prototype Pollution
SNYK-JS-MPATH-1577289
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept
Remote Memory Exposure
npm:mongoose:20160116
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Mature
Information Exposure
SNYK-JS-MONGOOSE-472486
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Prototype Pollution
SNYK-JS-MONGOOSE-1086688
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept
DLL Injection
SNYK-JS-KERBEROS-568900
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: mongoose
  • 6.0.12 - 2021-10-21

    6.0.12 / 2021-10-21

    • fix(cursor): remove the logic for emitting close, rely on autoDestroy option for Node 12 support #10906 iovanom
    • fix(map): support passing flattenMaps: false to Map toJSON(), make toJSON() flatten maps by default in TypeScript #10872
    • fix: upgrade to mongodb driver 4.1.3 #10911 orgads
    • fix(index.d.ts): correct TS function signature for SchemaType.prototype.set() #10799
    • fix(index.d.ts): support implicit $in in FilterQuery #10826
    • fix(index.d.ts): More precise type for Schema.clone() #10899 coyotte508
    • fix(index.d.ts): add caster property to schema arrays and document arrays #10865
    • docs: update updateMany() and deleteMany() docs to reflect new matchedCount, modifiedCount, deletedCount properties #10908 IslandRhythms
    • docs: fix broken links to populate virtuals #10870 IslandRhythms
    • docs: updated docs to have returnOriginal, removed new and returnDocument #10887 IslandRhythms
  • 6.0.11 - 2021-10-14

    chore: release 6.0.11

  • 6.0.10 - 2021-10-08

    chore: release 6.0.10

  • 6.0.9 - 2021-10-04

    chore: release 6.0.9

  • 6.0.8 - 2021-09-27

    chore: release 6.0.8

  • 6.0.7 - 2021-09-20

    chore: release 6.0.7

  • 6.0.6 - 2021-09-15
  • 6.0.5 - 2021-09-06
  • 6.0.4 - 2021-09-01
  • 6.0.3 - 2021-08-30
  • 6.0.2 - 2021-08-26
  • 6.0.1 - 2021-08-25
  • 6.0.0 - 2021-08-24
  • 6.0.0-rc2 - 2021-08-23
  • 6.0.0-rc1 - 2021-08-12
  • 6.0.0-rc0 - 2021-08-03
  • 5.13.13 - 2021-11-02

    chore: release 5.13.13

  • 5.13.12 - 2021-10-19

    chore: release 5.13.12

  • 5.13.11 - 2021-10-12

    chore: release 5.13.11

  • 5.13.10 - 2021-10-05

    chore: release 5.13.10

  • 5.13.9 - 2021-09-06
  • 5.13.8 - 2021-08-23
  • 5.13.7 - 2021-08-11
  • 5.13.6 - 2021-08-09
  • 5.13.5 - 2021-07-30
  • 5.13.4 - 2021-07-28
  • 5.13.3 - 2021-07-16
  • 5.13.2 - 2021-07-03
  • 5.13.1 - 2021-07-02
  • 5.13.0 - 2021-06-28
  • 5.12.15 - 2021-06-25
  • 5.12.14 - 2021-06-15
  • 5.12.13 - 2021-06-04
  • 5.12.12 - 2021-05-28
  • 5.12.11 - 2021-05-24
  • 5.12.10 - 2021-05-18
  • 5.12.9 - 2021-05-13
  • 5.12.8 - 2021-05-10
  • 5.12.7 - 2021-04-29
  • 5.12.6 - 2021-04-27
  • 5.12.5 - 2021-04-19
  • 5.12.4 - 2021-04-15
  • 5.12.3 - 2021-03-31
  • 5.12.2 - 2021-03-22
  • 5.12.1 - 2021-03-18
  • 5.12.0 - 2021-03-11
  • 5.11.20 - 2021-03-11
  • 5.11.19 - 2021-03-05
  • 5.11.18 - 2021-02-23
  • 5.11.17 - 2021-02-17
  • 5.11.16 - 2021-02-12
  • 5.11.15 - 2021-02-03
  • 5.11.14 - 2021-01-28
  • 5.11.13 - 2021-01-20
  • 5.11.12 - 2021-01-14
  • 5.11.11 - 2021-01-08
  • 5.11.10 - 2021-01-04
  • 5.11.9 - 2020-12-28
  • 5.11.8 - 2020-12-14
  • 5.11.7 - 2020-12-10
  • 5.11.6 - 2020-12-09
  • 5.11.5 - 2020-12-07
  • 5.11.4 - 2020-12-04
  • 5.11.3 - 2020-12-03
  • 5.11.2 - 2020-12-02
  • 5.11.1 - 2020-12-01
  • 5.11.0 - 2020-11-30
  • 5.10.19 - 2020-11-30
  • 5.10.18 - 2020-11-29
  • 5.10.17 - 2020-11-27
  • 5.10.16 - 2020-11-25
  • 5.10.15 - 2020-11-16
  • 5.10.14 - 2020-11-12
  • 5.10.13 - 2020-11-06
  • 5.10.12 - 2020-11-04
  • 5.10.11 - 2020-10-26
  • 5.10.10 - 2020-10-23
  • 5.10.9 - 2020-10-09
  • 5.10.8 - 2020-10-05
  • 5.10.7 - 2020-09-24
  • 5.10.6 - 2020-09-18
  • 5.10.5 - 2020-09-11
  • 5.10.4 - 2020-09-09
  • 5.10.3 - 2020-09-03
  • 5.10.2 - 2020-08-28
  • 5.10.1 - 2020-08-26
  • 5.10.0 - 2020-08-14
  • 5.9.29 - 2020-08-13
  • 5.9.28 - 2020-08-07
  • 5.9.27 - 2020-07-31
  • 5.9.26 - 2020-07-27
  • 5.9.25 - 2020-07-17
  • 5.9.24 - 2020-07-13
  • 5.9.23 - 2020-07-10
  • 5.9.22 - 2020-07-06
  • 5.9.21 - 2020-07-01
  • 5.9.20 - 2020-06-22
  • 5.9.19 - 2020-06-15
  • 5.9.18 - 2020-06-05
  • 5.9.17 - 2020-06-02
  • 5.9.16 - 2020-05-25
  • 5.9.15 - 2020-05-18
  • 5.9.14 - 2020-05-13
  • 5.9.13 - 2020-05-08
  • 5.9.12 - 2020-05-04
  • 5.9.11 - 2020-04-30
  • 5.9.10 - 2020-04-20
  • 5.9.9 - 2020-04-13
  • 5.9.7 - 2020-03-30
  • 5.9.6 - 2020-03-23
  • 5.9.5 - 2020-03-16
  • 5.9.4 - 2020-03-09
  • 5.9.3 - 2020-03-02
  • 5.9.2 - 2020-02-21
  • 5.9.1 - 2020-02-14
  • 5.9.0 - 2020-02-13
  • 5.8.13 - 2020-02-13
  • 5.8.12 - 2020-02-12
  • 5.8.11 - 2020-01-31
  • 5.8.10 - 2020-01-27
  • 5.8.9 - 2020-01-17
  • 5.8.7 - 2020-01-10
  • 5.8.6 - 2020-01-08
  • 5.8.5 - 2020-01-06
  • 5.8.4 - 2020-01-02
  • 5.8.3 - 2019-12-23
  • 5.8.2 - 2019-12-20
  • 5.8.1 - 2019-12-12
  • 5.8.0 - 2019-12-09
  • 5.7.14 - 2019-12-06
  • 5.7.13 - 2019-11-29
  • 5.7.12 - 2019-11-19
  • 5.7.11 - 2019-11-14
  • 5.7.10 - 2019-11-11
  • 5.7.9 - 2019-11-08
  • 5.7.8 - 2019-11-05
  • 5.7.7 - 2019-10-24
  • 5.7.6 - 2019-10-21
  • 5.7.5 - 2019-10-14
  • 5.7.4 - 2019-10-09
  • 5.7.3 - 2019-09-30
  • 5.7.1 - 2019-09-13
  • 5.7.0 - 2019-09-09
  • 5.6.13 - 2019-09-06
  • 5.6.12 - 2019-09-03
  • 5.6.11 - 2019-08-25
  • 5.6.10 - 2019-08-21
  • 5.6.9 - 2019-08-07
  • 5.6.8 - 2019-08-02
  • 5.6.7 - 2019-07-26
  • 5.6.6 - 2019-07-22
  • 5.6.5 - 2019-07-17
  • 5.6.4 - 2019-07-08
  • 5.6.3 - 2019-07-03
  • 5.6.2 - 2019-06-28
  • 5.6.1 - 2019-06-24
  • 5.6.0 - 2019-06-14
  • 5.5.15 - 2019-06-12
  • 5.5.14 - 2019-06-08
  • 5.5.13 - 2019-06-05
  • 5.5.12 - 2019-05-31
  • 5.5.11 - 2019-05-23
  • 5.5.10 - 2019-05-20
  • 5.5.9 - 2019-05-16
  • 5.5.8 - 2019-05-13
  • 5.5.7 - 2019-05-09
  • 5.5.6 - 2019-05-06
  • 5.5.5 - 2019-04-30
  • 5.5.4 - 2019-04-25
  • 5.5.3 - 2019-04-22
  • 5.5.2 - 2019-04-16
  • 5.5.1 - 2019-04-11
  • 5.5.0 - 2019-04-08
  • 5.4.23 - 2019-04-08
  • 5.4.22 - 2019-04-04
  • 5.4.21 - 2019-04-02
  • 5.4.20 - 2019-03-25
  • 5.4.19 - 2019-03-11
  • 5.4.18 - 2019-03-08
  • 5.4.17 - 2019-03-03
  • 5.4.16 - 2019-02-26
  • 5.4.15 - 2019-02-23
  • 5.4.14 - 2019-02-19
  • 5.4.13 - 2019-02-15
  • 5.4.12 - 2019-02-13
  • 5.4.11 - 2019-02-09
  • 5.4.10 - 2019-02-05
  • 5.4.9 - 2019-02-01
  • 5.4.8 - 2019-01-30
  • 5.4.7 - 2019-01-26
  • 5.4.6 - 2019-01-22
  • 5.4.5 - 2019-01-18
  • 5.4.4 - 2019-01-14
  • 5.4.3 - 2019-01-09
  • 5.4.2 - 2019-01-03
  • 5.4.1 - 2018-12-26
  • 5.4.0 - 2018-12-14
  • 5.3.16 - 2018-12-11
  • 5.3.15 - 2018-12-05
  • 5.3.14 - 2018-11-27
  • 5.3.13 - 2018-11-20
  • 5.3.12 - 2018-11-13
  • 5.3.11 - 2018-11-09
  • 5.3.10 - 2018-11-06
  • 5.3.9 - 2018-11-02
  • 5.3.8 - 2018-10-30
  • 5.3.7 - 2018-10-26
  • 5.3.6 - 2018-10-23
  • 5.3.5 - 2018-10-22
  • 5.3.4 - 2018-10-15
  • 5.3.3 - 2018-10-12
  • 5.3.2 - 2018-10-07
  • 5.3.1 - 2018-10-02
  • 5.3.0 - 2018-09-28
  • 5.2.18 - 2018-09-27
  • 5.2.17 - 2018-09-21
  • 5.2.16 - 2018-09-19
  • 5.2.15 - 2018-09-15
  • 5.2.14 - 2018-09-10
  • 5.2.13 - 2018-09-04
  • 5.2.12 - 2018-08-30
  • 5.2.11 - 2018-08-30
  • 5.2.10 - 2018-08-27
  • 5.2.9 - 2018-08-17
  • 5.2.8 - 2018-08-14
  • 5.2.7 - 2018-08-06
  • 5.2.6 - 2018-07-30
  • 5.2.5 - 2018-07-23
  • 5.2.4 - 2018-07-16
  • 5.2.3 - 2018-07-11
  • 5.2.2 - 2018-07-08
  • 5.2.1 - 2018-07-04
  • 5.2.0 - 2018-07-03
  • 5.1.8 - 2018-07-02
  • 5.1.7 - 2018-06-26
  • 5.1.6 - 2018-06-19
  • 5.1.5 - 2018-06-11
  • 5.1.4 - 2018-06-04
  • 5.1.3 - 2018-05-29
  • 5.1.2 - 2018-05-21
  • 5.1.1 - 2018-05-14
  • 5.1.0 - 2018-05-10
  • 5.0.18 - 2018-05-09
  • 5.0.17 - 2018-04-30
  • 5.0.16 - 2018-04-23
  • 5.0.15 - 2018-04-16
  • 5.0.14 - 2018-04-09
  • 5.0.13 - 2018-04-05
  • 5.0.12 - 2018-03-27
  • 5.0.11 - 2018-03-19
  • 5.0.10 - 2018-03-13
  • 5.0.9 - 2018-03-05
  • 5.0.8 - 2018-03-03
  • 5.0.7 - 2018-02-23
  • 5.0.6 - 2018-02-15
  • 5.0.5 - 2018-02-13
  • 5.0.4 - 2018-02-08
  • 5.0.3 - 2018-02-01
  • 5.0.2 - 2018-01-28
  • 5.0.1 - 2018-01-20
  • 5.0.0 - 2018-01-17
  • 5.0.0-rc2 - 2018-01-04
  • 5.0.0-rc1 - 2018-01-02
  • 5.0.0-rc0 - 2017-12-28
  • 4.13.21 - 2020-07-12
  • 4.13.20 - 2020-01-08
  • 4.13.19 - 2019-07-17
  • 4.13.18 - 2019-01-22
  • 4.13.17 - 2018-08-30
  • 4.13.16 - 2018-08-30
  • 4.13.15 - 2018-08-14
  • 4.13.14 - 2018-05-25
  • 4.13.13 - 2018-05-17
  • 4.13.12 - 2018-03-14
  • 4.13.11 - 2018-02-08
  • 4.13.10 - 2018-01-28
  • 4.13.9 - 2018-01-07
  • 4.13.8 - 2017-12-27
  • 4.13.7 - 2017-12-12
  • 4.13.6 - 2017-12-02
  • 4.13.5 - 2017-11-24
  • 4.13.4 - 2017-11-17
  • 4.13.3 - 2017-11-16
  • 4.13.2 - 2017-11-13
  • 4.13.1 - 2017-11-09
  • 4.13.0 - 2017-11-03
  • 4.12.6 - 2017-11-01
  • 4.12.5 - 2017-10-30
  • 4.12.4 - 2017-10-21
  • 4.12.3 - 2017-10-16
  • 4.12.2 - 2017-10-14
  • 4.12.1 - 2017-10-08
  • 4.12.0 - 2017-10-03
  • 4.11.14 - 2017-09-30
  • 4.11.13 - 2017-09-25
  • 4.11.12 - 2017-09-18
  • 4.11.11 - 2017-09-10
  • 4.11.10 - 2017-09-04
  • 4.11.9 - 2017-08-28
  • 4.11.8 - 2017-08-24
  • 4.11.7 - 2017-08-14
  • 4.11.6 - 2017-08-07
  • 4.11.5 - 2017-07-30
  • 4.11.4 - 2017-07-23
  • 4.11.3 - 2017-07-14
  • 4.11.2 - 2017-07-13
  • 4.11.1 - 2017-07-03
  • 4.11.0 - 2017-06-25
  • 4.10.8 - 2017-06-22
  • 4.10.7 - 2017-06-18
  • 4.10.6 - 2017-06-13
  • 4.10.5 - 2017-06-07
  • 4.10.4 - 2017-05-29
  • 4.10.3 - 2017-05-27
  • 4.10.2 - 2017-05-23
  • 4.10.1 - 2017-05-22
  • 4.10.0 - 2017-05-18
  • 4.9.10 - 2017-05-18
  • 4.9.9 - 2017-05-13
  • 4.9.8 - 2017-05-07
  • 4.9.7 - 2017-05-01
  • 4.9.6 - 2017-04-24
  • 4.9.5 - 2017-04-17
  • 4.9.4 - 2017-04-09
  • 4.9.3 - 2017-04-02
  • 4.9.2 - 2017-03-26
  • 4.9.1 - 2017-03-19
  • 4.9.0 - 2017-03-13
  • 4.8.7 - 2017-03-12
  • 4.8.6 - 2017-03-05
  • 4.8.5 - 2017-02-26
  • 4.8.4 - 2017-02-20
  • 4.8.3 - 2017-02-16
  • 4.8.2 - 2017-02-11
  • 4.8.1 - 2017-01-31
  • 4.8.0 - 2017-01-29
  • 4.7.9 - 2017-01-27
  • 4.7.8 - 2017-01-24
  • 4.7.7 - 2017-01-16
  • 4.7.6 - 2017-01-03
  • 4.7.5 - 2016-12-26
  • 4.7.5-pre - 2016-12-26
  • 4.7.4 - 2016-12-20
  • 4.7.3 - 2016-12-16
  • 4.7.2 - 2016-12-08
  • 4.7.1 - 2016-12-01
  • 4.7.0 - 2016-11-23
  • 4.6.8 - 2016-11-15
  • 4.6.7 - 2016-11-10
  • 4.6.6 - 2016-11-03
  • 4.6.5 - 2016-10-24
  • 4.6.4 - 2016-10-17
  • 4.6.3 - 2016-10-06
  • 4.6.2 - 2016-10-01
  • 4.6.1 - 2016-09-20
  • 4.6.0 - 2016-09-02
  • 4.5.10 - 2016-08-23
  • 4.5.9 - 2016-08-14
  • 4.5.8 - 2016-08-01
  • 4.5.7 - 2016-07-25
  • 4.5.6 - 2016-07-23
  • 4.5.5 - 2016-07-18
  • 4.5.4 - 2016-07-11
  • 4.5.3 - 2016-07-01
  • 4.5.2 - 2016-06-25
  • 4.5.1 - 2016-06-18
  • 4.5.0 - 2016-06-13
  • 4.4.20 - 2016-06-05
  • 4.4.19 - 2016-05-21
  • 4.4.18 - 2016-05-21
  • 4.4.17 - 2016-05-13
  • 4.4.16 - 2016-05-09
  • 4.4.15 - 2016-05-06
  • 4.4.14 - 2016-04-27
  • 4.4.13 - 2016-04-21
  • 4.4.12 - 2016-04-08
  • 4.4.11 - 2016-04-03
  • 4.4.10 - 2016-03-24
  • 4.4.9 - 2016-03-23
  • 4.4.8 - 2016-03-18
  • 4.4.7 - 2016-03-11
  • 4.4.6 - 2016-03-03
  • 4.4.5 - 2016-02-24
  • 4.4.4 - 2016-02-17
  • 4.4.3 - 2016-02-09
  • 4.4.2 - 2016-02-05
  • 4.4.1 - 2016-02-03
  • 4.4.0 - 2016-02-02
  • 4.3.7 - 2016-01-23
  • 4.3.6 - 2016-01-15
  • 4.3.5 - 2016-01-09
  • 4.3.4 - 2015-12-23
  • 4.3.3 - 2015-12-18
  • 4.3.2 - 2015-12-17
  • 4.3.1 - 2015-12-11
  • 4.3.0 - 2015-12-09
  • 4.2.10 - 2015-12-08
  • 4.2.9 - 2015-12-02
  • 4.2.8 - 2015-11-25
  • 4.2.7 - 2015-11-20
  • 4.2.6 - 2015-11-16
  • 4.2.5 - 2015-11-09
  • 4.2.4 - 2015-11-02
from mongoose GitHub release notes
Commit messages
Package name: mongoose
  • b30b7d4 chore: release 6.0.12
  • 05b3cd0 Merge pull request #10911 from orgads/mongo-4.1.3
  • 86357df Merge pull request #10908 from Automattic/update-and-delete-doc-fix
  • a2f626b Merge pull request #10906 from iovanom/gh-10902
  • 7f49d40 fix(index.d.ts): add `caster` property to schema arrays and document arrays
  • 021baf6 chore: upgrade to mongodb driver 4.1.3
  • b198619 fixed delete and update docs as well as website.js scripts to reflect the changes from the test refactor.
  • 2a3bef4 [gh-10902] Remove the logic for emit close, autodestroy will emit close. Works only for node>=12.
  • c825bbc Merge branch '5.x'
  • ec4f07e chore: release 5.13.12
  • 7b4e4e7 test: hopefully fix Node v4 tests on 5.x branch
  • 1f9911a Merge pull request #10812 from Automattic/refactor-doc-tests
  • 8e74111 Merge pull request #10899 from coyotte508/patch-2
  • 3b26cf6 test: fix up setDefaultsOnInsert test with dangling doc
  • 8642715 Merge branch 'master' into refactor-doc-tests
  • 92bfcb7 Merge pull request #10897 from iovanom/gh-10875-1
  • 0648fb0 fix(map): support passing `flattenMaps: false` to Map `toJSON()`, make `toJSON()` flatten maps by default in TypeScript
  • ad4574f fix(map): make `toJSON()` respect `flattenMaps` option
  • 5302777 test(document): repro #10872
  • 0d62aaa chore: update opencollective sponsors
  • 8865bd5 fix(index.d.ts): support implicit `$in` in FilterQuery
  • 8337f1d fix(index.d.ts): correct TS function signature for `SchemaType.prototype.set()`
  • 6094750 Merge pull request #10890 from Automattic/populate-virtual-link
  • ee1b59b Merge pull request #10887 from Automattic/returnDocument-documentation

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant