[Snyk] Upgrade mongoose from 6.4.6 to 6.11.3 #439

JonasLang-dev · 2023-08-01T23:31:34Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade mongoose from 6.4.6 to 6.11.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 40 versions ahead of your current version.
The recommended version was released 21 days ago, on 2023-07-11.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-MONGOOSE-5777721	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mongoose

6.11.3 - 2023-07-11
chore: release 6.11.3
6.11.2 - 2023-06-08
6.11.1 - 2023-05-08
6.11.0 - 2023-05-01
6.10.5 - 2023-04-06
6.10.4 - 2023-03-21
6.10.3 - 2023-03-13
6.10.2 - 2023-03-07
6.10.1 - 2023-03-03
6.10.0 - 2023-02-22
6.9.3 - 2023-02-22
6.9.2 - 2023-02-16
6.9.1 - 2023-02-06
6.9.0 - 2023-01-25
6.8.4 - 2023-01-17
6.8.3 - 2023-01-06
6.8.2 - 2022-12-28
6.8.1 - 2022-12-19
6.8.0 - 2022-12-05
6.7.5 - 2022-11-30
6.7.4 - 2022-11-28
6.7.3 - 2022-11-22
6.7.2 - 2022-11-07
6.7.1 - 2022-11-02
6.7.0 - 2022-10-24
6.6.7 - 2022-10-21
6.6.6 - 2022-10-20
6.6.5 - 2022-10-05
6.6.4 - 2022-10-03
6.6.3 - 2022-09-30
6.6.2 - 2022-09-26
6.6.1 - 2022-09-14
6.6.0 - 2022-09-08
6.5.5 - 2022-09-07
6.5.4 - 2022-08-30
6.5.3 - 2022-08-25
6.5.2 - 2022-08-10
6.5.1 - 2022-08-03
6.5.0 - 2022-07-26
6.4.7 - 2022-07-25
6.4.6 - 2022-07-20

from mongoose GitHub release notes

Commit messages

Package name: mongoose

e9eb8ab chore: release 6.11.3
688da8f test: fix flakey tests, remove test for #9597 because it affects global state and fails intermittently on deno
4f264a8 test: fix tests re: #13317
9616af7 fix(schema): correctly handle uuids with populate()
305ce4f fix: avoid prototype pollution on init
35e59eb docs: link to migrating to 6 in 6.x docs
a28933e chore: release 6.11.2
3a6b0dd chore: use deno v1.34 in test for MMS HTTP issues
f7c6d3e Merge pull request #13476 from Automattic/vkarpov15/gh-13453
5552107 fix(cursor): allow find middleware to modify query cursor options
7a90868 Merge branch '6.x' of github.com:Automattic/mongoose into 6.x
23132db chore: release 6.11.1
d96de21 Merge pull request #13384 from Automattic/vkarpov15/gh-13373
0ab335f docs: add note about SUPPRESS_JEST_WARNINGS to jest docs
eb28aaf fix: quick error message improvement
9ea1a64 fix: add SUPPRESS_JEST_WARNINGS environment variable to silence jest warnings
76e6456 Merge pull request #13292 from hasezoey/modifyBulkWriteType6
2bbbb3c Merge pull request #13348 from Automattic/vkarpov15/gh-13340
523f6ce Merge pull request #13365 from hasezoey/denoFixCycle6x
48aed67 Revert "test: try removing mongodb memory server to try to fix deno tests"
5f587f7 chore(deno): change to start mocha fixtures before mocha
73ef135 chore: quick fix for versioned deploy
d382b73 chore: more docs build fixes
f0291e4 chore: improve 6.x docs build