Skip to content

[Snyk] Upgrade mongoose from 4.2.4 to 5.13.3 #107

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

[Snyk] Upgrade mongoose from 4.2.4 to 5.13.3 #107

wants to merge 1 commit into from

Conversation

@snyk-bot
Copy link

@snyk-bot snyk-bot commented Aug 8, 2021

Snyk has created this PR to upgrade mongoose from 4.2.4 to 5.13.3.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 376 versions ahead of your current version.
  • The recommended version was released 22 days ago, on 2021-07-16.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-MQUERY-1089718		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-MQUERY-1050858		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 No Known Exploit
Remote Memory Exposure
npm:mongoose:20160116		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Mature
Denial of Service (DoS)
SNYK-JS-MONGODB-473855		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 No Known Exploit
DLL Injection
SNYK-JS-KERBEROS-568900		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 No Known Exploit
Information Exposure
SNYK-JS-MONGOOSE-472486		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 No Known Exploit
Prototype Pollution
SNYK-JS-MONGOOSE-1086688		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: mongoose
  • 5.13.3 - 2021-07-16

    chore: release 5.13.3

  • 5.13.2 - 2021-07-03

    chore: release 5.13.2

  • 5.13.1 - 2021-07-02

    chore: release 5.13.1

  • 5.13.0 - 2021-06-28

    chore: release 5.13.0

  • 5.12.15 - 2021-06-25

    chore: release 5.12.15

  • 5.12.14 - 2021-06-15

    chore: release 5.12.14

  • 5.12.13 - 2021-06-04

    chore: release 5.12.13

  • 5.12.12 - 2021-05-28

    chore: release 5.12.12

  • 5.12.11 - 2021-05-24
  • 5.12.10 - 2021-05-18
  • 5.12.9 - 2021-05-13
  • 5.12.8 - 2021-05-10
  • 5.12.7 - 2021-04-29
  • 5.12.6 - 2021-04-27
  • 5.12.5 - 2021-04-19
  • 5.12.4 - 2021-04-15
  • 5.12.3 - 2021-03-31
  • 5.12.2 - 2021-03-22
  • 5.12.1 - 2021-03-18
  • 5.12.0 - 2021-03-11
  • 5.11.20 - 2021-03-11
  • 5.11.19 - 2021-03-05
  • 5.11.18 - 2021-02-23
  • 5.11.17 - 2021-02-17
  • 5.11.16 - 2021-02-12
  • 5.11.15 - 2021-02-03
  • 5.11.14 - 2021-01-28
  • 5.11.13 - 2021-01-20
  • 5.11.12 - 2021-01-14
  • 5.11.11 - 2021-01-08
  • 5.11.10 - 2021-01-04
  • 5.11.9 - 2020-12-28
  • 5.11.8 - 2020-12-14
  • 5.11.7 - 2020-12-10
  • 5.11.6 - 2020-12-09
  • 5.11.5 - 2020-12-07
  • 5.11.4 - 2020-12-04
  • 5.11.3 - 2020-12-03
  • 5.11.2 - 2020-12-02
  • 5.11.1 - 2020-12-01
  • 5.11.0 - 2020-11-30
  • 5.10.19 - 2020-11-30
  • 5.10.18 - 2020-11-29
  • 5.10.17 - 2020-11-27
  • 5.10.16 - 2020-11-25
  • 5.10.15 - 2020-11-16
  • 5.10.14 - 2020-11-12
  • 5.10.13 - 2020-11-06
  • 5.10.12 - 2020-11-04
  • 5.10.11 - 2020-10-26
  • 5.10.10 - 2020-10-23
  • 5.10.9 - 2020-10-09
  • 5.10.8 - 2020-10-05
  • 5.10.7 - 2020-09-24
  • 5.10.6 - 2020-09-18
  • 5.10.5 - 2020-09-11
  • 5.10.4 - 2020-09-09
  • 5.10.3 - 2020-09-03
  • 5.10.2 - 2020-08-28
  • 5.10.1 - 2020-08-26
  • 5.10.0 - 2020-08-14
  • 5.9.29 - 2020-08-13
  • 5.9.28 - 2020-08-07
  • 5.9.27 - 2020-07-31
  • 5.9.26 - 2020-07-27
  • 5.9.25 - 2020-07-17
  • 5.9.24 - 2020-07-13
  • 5.9.23 - 2020-07-10
  • 5.9.22 - 2020-07-06
  • 5.9.21 - 2020-07-01
  • 5.9.20 - 2020-06-22
  • 5.9.19 - 2020-06-15
  • 5.9.18 - 2020-06-05
  • 5.9.17 - 2020-06-02
  • 5.9.16 - 2020-05-25
  • 5.9.15 - 2020-05-18
  • 5.9.14 - 2020-05-13
  • 5.9.13 - 2020-05-08
  • 5.9.12 - 2020-05-04
  • 5.9.11 - 2020-04-30
  • 5.9.10 - 2020-04-20
  • 5.9.9 - 2020-04-13
  • 5.9.7 - 2020-03-30
  • 5.9.6 - 2020-03-23
  • 5.9.5 - 2020-03-16
  • 5.9.4 - 2020-03-09
  • 5.9.3 - 2020-03-02
  • 5.9.2 - 2020-02-21
  • 5.9.1 - 2020-02-14
  • 5.9.0 - 2020-02-13
  • 5.8.13 - 2020-02-13
  • 5.8.12 - 2020-02-12
  • 5.8.11 - 2020-01-31
  • 5.8.10 - 2020-01-27
  • 5.8.9 - 2020-01-17
  • 5.8.7 - 2020-01-10
  • 5.8.6 - 2020-01-08
  • 5.8.5 - 2020-01-06
  • 5.8.4 - 2020-01-02
  • 5.8.3 - 2019-12-23
  • 5.8.2 - 2019-12-20
  • 5.8.1 - 2019-12-12
  • 5.8.0 - 2019-12-09
  • 5.7.14 - 2019-12-06
  • 5.7.13 - 2019-11-29
  • 5.7.12 - 2019-11-19
  • 5.7.11 - 2019-11-14
  • 5.7.10 - 2019-11-11
  • 5.7.9 - 2019-11-08
  • 5.7.8 - 2019-11-05
  • 5.7.7 - 2019-10-24
  • 5.7.6 - 2019-10-21
  • 5.7.5 - 2019-10-14
  • 5.7.4 - 2019-10-09
  • 5.7.3 - 2019-09-30
  • 5.7.1 - 2019-09-13
  • 5.7.0 - 2019-09-09
  • 5.6.13 - 2019-09-06
  • 5.6.12 - 2019-09-03
  • 5.6.11 - 2019-08-25
  • 5.6.10 - 2019-08-21
  • 5.6.9 - 2019-08-07
  • 5.6.8 - 2019-08-02
  • 5.6.7 - 2019-07-26
  • 5.6.6 - 2019-07-22
  • 5.6.5 - 2019-07-17
  • 5.6.4 - 2019-07-08
  • 5.6.3 - 2019-07-03
  • 5.6.2 - 2019-06-28
  • 5.6.1 - 2019-06-24
  • 5.6.0 - 2019-06-14
  • 5.5.15 - 2019-06-12
  • 5.5.14 - 2019-06-08
  • 5.5.13 - 2019-06-05
  • 5.5.12 - 2019-05-31
  • 5.5.11 - 2019-05-23
  • 5.5.10 - 2019-05-20
  • 5.5.9 - 2019-05-16
  • 5.5.8 - 2019-05-13
  • 5.5.7 - 2019-05-09
  • 5.5.6 - 2019-05-06
  • 5.5.5 - 2019-04-30
  • 5.5.4 - 2019-04-25
  • 5.5.3 - 2019-04-22
  • 5.5.2 - 2019-04-16
  • 5.5.1 - 2019-04-11
  • 5.5.0 - 2019-04-08
  • 5.4.23 - 2019-04-08
  • 5.4.22 - 2019-04-04
  • 5.4.21 - 2019-04-02
  • 5.4.20 - 2019-03-25
  • 5.4.19 - 2019-03-11
  • 5.4.18 - 2019-03-08
  • 5.4.17 - 2019-03-03
  • 5.4.16 - 2019-02-26
  • 5.4.15 - 2019-02-23
  • 5.4.14 - 2019-02-19
  • 5.4.13 - 2019-02-15
  • 5.4.12 - 2019-02-13
  • 5.4.11 - 2019-02-09
  • 5.4.10 - 2019-02-05
  • 5.4.9 - 2019-02-01
  • 5.4.8 - 2019-01-30
  • 5.4.7 - 2019-01-26
  • 5.4.6 - 2019-01-22
  • 5.4.5 - 2019-01-18
  • 5.4.4 - 2019-01-14
  • 5.4.3 - 2019-01-09
  • 5.4.2 - 2019-01-03
  • 5.4.1 - 2018-12-26
  • 5.4.0 - 2018-12-14
  • 5.3.16 - 2018-12-11
  • 5.3.15 - 2018-12-05
  • 5.3.14 - 2018-11-27
  • 5.3.13 - 2018-11-20
  • 5.3.12 - 2018-11-13
  • 5.3.11 - 2018-11-09
  • 5.3.10 - 2018-11-06
  • 5.3.9 - 2018-11-02
  • 5.3.8 - 2018-10-30
  • 5.3.7 - 2018-10-26
  • 5.3.6 - 2018-10-23
  • 5.3.5 - 2018-10-22
  • 5.3.4 - 2018-10-15
  • 5.3.3 - 2018-10-12
  • 5.3.2 - 2018-10-07
  • 5.3.1 - 2018-10-02
  • 5.3.0 - 2018-09-28
  • 5.2.18 - 2018-09-27
  • 5.2.17 - 2018-09-21
  • 5.2.16 - 2018-09-19
  • 5.2.15 - 2018-09-15
  • 5.2.14 - 2018-09-10
  • 5.2.13 - 2018-09-04
  • 5.2.12 - 2018-08-30
  • 5.2.11 - 2018-08-30
  • 5.2.10 - 2018-08-27
  • 5.2.9 - 2018-08-17
  • 5.2.8 - 2018-08-14
  • 5.2.7 - 2018-08-06
  • 5.2.6 - 2018-07-30
  • 5.2.5 - 2018-07-23
  • 5.2.4 - 2018-07-16
  • 5.2.3 - 2018-07-11
  • 5.2.2 - 2018-07-08
  • 5.2.1 - 2018-07-04
  • 5.2.0 - 2018-07-03
  • 5.1.8 - 2018-07-02
  • 5.1.7 - 2018-06-26
  • 5.1.6 - 2018-06-19
  • 5.1.5 - 2018-06-11
  • 5.1.4 - 2018-06-04
  • 5.1.3 - 2018-05-29
  • 5.1.2 - 2018-05-21
  • 5.1.1 - 2018-05-14
  • 5.1.0 - 2018-05-10
  • 5.0.18 - 2018-05-09
  • 5.0.17 - 2018-04-30
  • 5.0.16 - 2018-04-23
  • 5.0.15 - 2018-04-16
  • 5.0.14 - 2018-04-09
  • 5.0.13 - 2018-04-05
  • 5.0.12 - 2018-03-27
  • 5.0.11 - 2018-03-19
  • 5.0.10 - 2018-03-13
  • 5.0.9 - 2018-03-05
  • 5.0.8 - 2018-03-03
  • 5.0.7 - 2018-02-23
  • 5.0.6 - 2018-02-15
  • 5.0.5 - 2018-02-13
  • 5.0.4 - 2018-02-08
  • 5.0.3 - 2018-02-01
  • 5.0.2 - 2018-01-28
  • 5.0.1 - 2018-01-20
  • 5.0.0 - 2018-01-17
  • 5.0.0-rc2 - 2018-01-04
  • 5.0.0-rc1 - 2018-01-02
  • 5.0.0-rc0 - 2017-12-28
  • 4.13.21 - 2020-07-12
  • 4.13.20 - 2020-01-08
  • 4.13.19 - 2019-07-17
  • 4.13.18 - 2019-01-22
  • 4.13.17 - 2018-08-30
  • 4.13.16 - 2018-08-30
  • 4.13.15 - 2018-08-14
  • 4.13.14 - 2018-05-25
  • 4.13.13 - 2018-05-17
  • 4.13.12 - 2018-03-14
  • 4.13.11 - 2018-02-08
  • 4.13.10 - 2018-01-28
  • 4.13.9 - 2018-01-07
  • 4.13.8 - 2017-12-27
  • 4.13.7 - 2017-12-12
  • 4.13.6 - 2017-12-02
  • 4.13.5 - 2017-11-24
  • 4.13.4 - 2017-11-17
  • 4.13.3 - 2017-11-16
  • 4.13.2 - 2017-11-13
  • 4.13.1 - 2017-11-09
  • 4.13.0 - 2017-11-03
  • 4.12.6 - 2017-11-01
  • 4.12.5 - 2017-10-30
  • 4.12.4 - 2017-10-21
  • 4.12.3 - 2017-10-16
  • 4.12.2 - 2017-10-14
  • 4.12.1 - 2017-10-08
  • 4.12.0 - 2017-10-03
  • 4.11.14 - 2017-09-30
  • 4.11.13 - 2017-09-25
  • 4.11.12 - 2017-09-18
  • 4.11.11 - 2017-09-10
  • 4.11.10 - 2017-09-04
  • 4.11.9 - 2017-08-28
  • 4.11.8 - 2017-08-24
  • 4.11.7 - 2017-08-14
  • 4.11.6 - 2017-08-07
  • 4.11.5 - 2017-07-30
  • 4.11.4 - 2017-07-23
  • 4.11.3 - 2017-07-14
  • 4.11.2 - 2017-07-13
  • 4.11.1 - 2017-07-03
  • 4.11.0 - 2017-06-25
  • 4.10.8 - 2017-06-22
  • 4.10.7 - 2017-06-18
  • 4.10.6 - 2017-06-13
  • 4.10.5 - 2017-06-07
  • 4.10.4 - 2017-05-29
  • 4.10.3 - 2017-05-27
  • 4.10.2 - 2017-05-23
  • 4.10.1 - 2017-05-22
  • 4.10.0 - 2017-05-18
  • 4.9.10 - 2017-05-18
  • 4.9.9 - 2017-05-13
  • 4.9.8 - 2017-05-07
  • 4.9.7 - 2017-05-01
  • 4.9.6 - 2017-04-24
  • 4.9.5 - 2017-04-17
  • 4.9.4 - 2017-04-09
  • 4.9.3 - 2017-04-02
  • 4.9.2 - 2017-03-26
  • 4.9.1 - 2017-03-19
  • 4.9.0 - 2017-03-13
  • 4.8.7 - 2017-03-12
  • 4.8.6 - 2017-03-05
  • 4.8.5 - 2017-02-26
  • 4.8.4 - 2017-02-20
  • 4.8.3 - 2017-02-16
  • 4.8.2 - 2017-02-11
  • 4.8.1 - 2017-01-31
  • 4.8.0 - 2017-01-29
  • 4.7.9 - 2017-01-27
  • 4.7.8 - 2017-01-24
  • 4.7.7 - 2017-01-16
  • 4.7.6 - 2017-01-03
  • 4.7.5 - 2016-12-26
  • 4.7.5-pre - 2016-12-26
  • 4.7.4 - 2016-12-20
  • 4.7.3 - 2016-12-16
  • 4.7.2 - 2016-12-08
  • 4.7.1 - 2016-12-01
  • 4.7.0 - 2016-11-23
  • 4.6.8 - 2016-11-15
  • 4.6.7 - 2016-11-10
  • 4.6.6 - 2016-11-03
  • 4.6.5 - 2016-10-24
  • 4.6.4 - 2016-10-17
  • 4.6.3 - 2016-10-06
  • 4.6.2 - 2016-10-01
  • 4.6.1 - 2016-09-20
  • 4.6.0 - 2016-09-02
  • 4.5.10 - 2016-08-23
  • 4.5.9 - 2016-08-14
  • 4.5.8 - 2016-08-01
  • 4.5.7 - 2016-07-25
  • 4.5.6 - 2016-07-23
  • 4.5.5 - 2016-07-18
  • 4.5.4 - 2016-07-11
  • 4.5.3 - 2016-07-01
  • 4.5.2 - 2016-06-25
  • 4.5.1 - 2016-06-18
  • 4.5.0 - 2016-06-13
  • 4.4.20 - 2016-06-05
  • 4.4.19 - 2016-05-21
  • 4.4.18 - 2016-05-21
  • 4.4.17 - 2016-05-13
  • 4.4.16 - 2016-05-09
  • 4.4.15 - 2016-05-06
  • 4.4.14 - 2016-04-27
  • 4.4.13 - 2016-04-21
  • 4.4.12 - 2016-04-08
  • 4.4.11 - 2016-04-03
  • 4.4.10 - 2016-03-24
  • 4.4.9 - 2016-03-23
  • 4.4.8 - 2016-03-18
  • 4.4.7 - 2016-03-11
  • 4.4.6 - 2016-03-03
  • 4.4.5 - 2016-02-24
  • 4.4.4 - 2016-02-17
  • 4.4.3 - 2016-02-09
  • 4.4.2 - 2016-02-05
  • 4.4.1 - 2016-02-03
  • 4.4.0 - 2016-02-02
  • 4.3.7 - 2016-01-23
  • 4.3.6 - 2016-01-15
  • 4.3.5 - 2016-01-09
  • 4.3.4 - 2015-12-23
  • 4.3.3 - 2015-12-18
  • 4.3.2 - 2015-12-17
  • 4.3.1 - 2015-12-11
  • 4.3.0 - 2015-12-09
  • 4.2.10 - 2015-12-08
  • 4.2.9 - 2015-12-02
  • 4.2.8 - 2015-11-25
  • 4.2.7 - 2015-11-20
  • 4.2.6 - 2015-11-16
  • 4.2.5 - 2015-11-09
  • 4.2.4 - 2015-11-02
from mongoose GitHub release notes
Commit messages
Package name: mongoose
  • 3924628 chore: release 5.13.3
  • 88a32fe Merge pull request #10442 from semirturgay/gh-broken-defaults
  • 66fd25f fix(timestamps): apply timestamps when creating new subdocs with `$addToSet` and with positional operator
  • c6a646c test(timestamps): repro #10447
  • 169f9e1 fix(schema): allow calling `Schema#loadClass()` with class that has a static getter with no setter
  • acd262c test(schema): repro #10436
  • 16b6a37 fix(model): avoid throwing error when `bulkSave()` called on a document with no changes
  • c1ce3c9 test(model): repro #9673
  • ad8ca76 fix(index.d.ts): allow passing ResultType generic to `Schema#path()`
  • 34d2796 fix(index.d.ts): add `discriminator()` for single nested subdocs to type definitions
  • ed1bffb Merge pull request #10452 from DouglasGabr/master
  • 5edb25d fix(index.d.ts): consistently use NativeDate instead of Date for Date validators and timestamps functions
  • 982a389 fix(types): remove discriminator type requirement
  • a22c908 fix(model): fixing model defaults for embedded objects
  • 6250841 chore: update opencollective sponsors
  • c01685a Merge pull request #10440 from AbdelrahmanHafez/patch-10
  • ac545ef test(model): cover applying object defaults
  • ca34cfa bump native driver to 3.6.10
  • e1fcf29 chore: update opencollective sponsors
  • c03cacb chore: release 5.13.2
  • 4482592 style: fix lint
  • 1159631 chore: allow @ types/node 14.x
  • 726ce8b fix: hardcode @ types/node version for now to avoid breaking changes from feat(node): v16 DefinitelyTyped/DefinitelyTyped#53669
  • d250ddc fix(index.d.ts): allow using `type: Date` with Date paths in SchemaDefinitionType

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@akanchhaS akanchhaS closed this Sep 14, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@snyk-bot @akanchhaS