[Snyk] Upgrade mongoose from 6.4.6 to 6.11.5 #444

JonasLang-dev · 2023-08-23T17:45:52Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade mongoose from 6.4.6 to 6.11.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 42 versions ahead of your current version.
The recommended version was released 22 days ago, on 2023-08-01.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-MONGOOSE-5777721	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mongoose

6.11.5 - 2023-08-01
chore: release 6.11.5
6.11.4 - 2023-07-17
chore: release 6.11.4
6.11.3 - 2023-07-11
6.11.2 - 2023-06-08
6.11.1 - 2023-05-08
6.11.0 - 2023-05-01
6.10.5 - 2023-04-06
6.10.4 - 2023-03-21
6.10.3 - 2023-03-13
6.10.2 - 2023-03-07
6.10.1 - 2023-03-03
6.10.0 - 2023-02-22
6.9.3 - 2023-02-22
6.9.2 - 2023-02-16
6.9.1 - 2023-02-06
6.9.0 - 2023-01-25
6.8.4 - 2023-01-17
6.8.3 - 2023-01-06
6.8.2 - 2022-12-28
6.8.1 - 2022-12-19
6.8.0 - 2022-12-05
6.7.5 - 2022-11-30
6.7.4 - 2022-11-28
6.7.3 - 2022-11-22
6.7.2 - 2022-11-07
6.7.1 - 2022-11-02
6.7.0 - 2022-10-24
6.6.7 - 2022-10-21
6.6.6 - 2022-10-20
6.6.5 - 2022-10-05
6.6.4 - 2022-10-03
6.6.3 - 2022-09-30
6.6.2 - 2022-09-26
6.6.1 - 2022-09-14
6.6.0 - 2022-09-08
6.5.5 - 2022-09-07
6.5.4 - 2022-08-30
6.5.3 - 2022-08-25
6.5.2 - 2022-08-10
6.5.1 - 2022-08-03
6.5.0 - 2022-07-26
6.4.7 - 2022-07-25
6.4.6 - 2022-07-20

from mongoose GitHub release notes

Commit messages

Package name: mongoose

be5b7d5 chore: release 6.11.5
d5784d8 Merge pull request #13682 from Automattic/vkarpov15/gh-13626-2
1a9f1b3 fix(document): correctly set index when casting subdocs for validation re: #13626
622fa1c Merge pull request #13671 from Automattic/vkarpov15/gh-13626
d012888 fix(schema): make `Schema.prototype.clone()` avoid creating different copies of subdocuments and single nested paths underneath single nested paths
0d17ccb Merge pull request #13637 from Automattic/IslandRhythms/gh-13364-backport
1b09cb1 backported
20b030e chore: release 6.11.4
895bc32 Merge pull request #13614 from Automattic/vkarpov15/gh-13191-2
b8ebe80 perf: speed up mapOfSubdocs benchmark by 4x by avoiding unnecessary O(n^2) loop in getPathsToValidate()
dcc4c9a perf: some more small optimizations
69405b2 Merge branch '6.x' into vkarpov15/gh-13191-2
e9eb8ab chore: release 6.11.3
688da8f test: fix flakey tests, remove test for #9597 because it affects global state and fails intermittently on deno
4f264a8 test: fix tests re: #13317
9616af7 fix(schema): correctly handle uuids with populate()
305ce4f fix: avoid prototype pollution on init
f143485 perf: couple of small micro-optimizations re: #13191
35e59eb docs: link to migrating to 6 in 6.x docs
a28933e chore: release 6.11.2
3a6b0dd chore: use deno v1.34 in test for MMS HTTP issues
f7c6d3e Merge pull request #13476 from Automattic/vkarpov15/gh-13453
a1b7bb5 perf(schema): make some micro optimizations for casting subdocument paths
5552107 fix(cursor): allow find middleware to modify query cursor options