[Snyk] Upgrade mongoose from 6.4.6 to 6.12.4 #473

JonasLang-dev · 2024-01-18T19:43:29Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade mongoose from 6.4.6 to 6.12.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 48 versions ahead of your current version.
The recommended version was released 22 days ago, on 2023-12-27.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ZOD-5925617	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-MONGOOSE-5777721	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Information Exposure SNYK-JS-MONGODB-5871303	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mongoose

6.12.4 - 2023-12-27
chore: release 6.12.4
6.12.3 - 2023-11-07
6.12.2 - 2023-10-25
6.12.1 - 2023-10-12
6.12.0 - 2023-08-24
6.11.6 - 2023-08-21
6.11.5 - 2023-08-01
6.11.4 - 2023-07-17
6.11.3 - 2023-07-11
6.11.2 - 2023-06-08
6.11.1 - 2023-05-08
6.11.0 - 2023-05-01
6.10.5 - 2023-04-06
6.10.4 - 2023-03-21
6.10.3 - 2023-03-13
6.10.2 - 2023-03-07
6.10.1 - 2023-03-03
6.10.0 - 2023-02-22
6.9.3 - 2023-02-22
6.9.2 - 2023-02-16
6.9.1 - 2023-02-06
6.9.0 - 2023-01-25
6.8.4 - 2023-01-17
6.8.3 - 2023-01-06
6.8.2 - 2022-12-28
6.8.1 - 2022-12-19
6.8.0 - 2022-12-05
6.7.5 - 2022-11-30
6.7.4 - 2022-11-28
6.7.3 - 2022-11-22
6.7.2 - 2022-11-07
6.7.1 - 2022-11-02
6.7.0 - 2022-10-24
6.6.7 - 2022-10-21
6.6.6 - 2022-10-20
6.6.5 - 2022-10-05
6.6.4 - 2022-10-03
6.6.3 - 2022-09-30
6.6.2 - 2022-09-26
6.6.1 - 2022-09-14
6.6.0 - 2022-09-08
6.5.5 - 2022-09-07
6.5.4 - 2022-08-30
6.5.3 - 2022-08-25
6.5.2 - 2022-08-10
6.5.1 - 2022-08-03
6.5.0 - 2022-07-26
6.4.7 - 2022-07-25
6.4.6 - 2022-07-20

from mongoose GitHub release notes

Commit messages

Package name: mongoose

44f391b chore: release 6.12.4
ff75c75 fix: upgrade mongodb driver -> 4.17.2
d36d134 Merge pull request #14173 from Automattic/vkarpov15/handle-nested-projections
95d917b test: skip tests for #14115 if MongoDB < 5
dadac4e test: add test case for #14115
2a78e25 refactor: use fix from #13883 for #14172
6d25679 Merge pull request #14172 from rohanricky/array_null_check
30315ce fix(document): avoid treating nested projection as inclusive when applying defaults
637b63e null check
6760c54 chore: publish 6.x under 6x tag
3dce034 chore: release 6.12.3
017b16e Merge pull request #14053 from Automattic/vkarpov15/gh-14022
4c66fcb Merge pull request #14052 from Automattic/vkarpov15/gh-14049
fd781c1 test: remove unused var re: code review comments
929621e Merge branch '6.x' into vkarpov15/gh-14049
4bd5927 fix(document): consistently avoid marking subpaths of nested paths as modified
0d33ce5 Merge branch '6.x' into vkarpov15/gh-14022
cc75c7b test: fix tests
c7a9eb6 fix(document): avoid unmarking modified on nested path if no initial value stored and already modified
c9136f5 test: typo fix
0077c5f test: correctly work around lack of elvis operator in node v2 for #13085 test
af49bbe test: fix tests re: #13085
70a1a6f fix(ChangeStream): correctly handle `hydrate` option when using change stream as stream instead of iterator
be441a0 fix(schema): fix dangling reference to virtual in `tree` after `removeVirtual()`