[Snyk] Upgrade mongoose from 6.4.6 to 6.11.4

[vonypeto]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade mongoose from 6.4.6 to 6.11.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 41 versions ahead of your current version.
• The recommended version was released a month ago, on 2023-07-17.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-MONGOOSE-5777721	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mongoose

• 6.11.4 - 2023-07-17
  

  chore: release 6.11.4

• 6.11.3 - 2023-07-11
  

  chore: release 6.11.3

• 6.11.2 - 2023-06-08
• 6.11.1 - 2023-05-08
• 6.11.0 - 2023-05-01
• 6.10.5 - 2023-04-06
• 6.10.4 - 2023-03-21
• 6.10.3 - 2023-03-13
• 6.10.2 - 2023-03-07
• 6.10.1 - 2023-03-03
• 6.10.0 - 2023-02-22
• 6.9.3 - 2023-02-22
• 6.9.2 - 2023-02-16
• 6.9.1 - 2023-02-06
• 6.9.0 - 2023-01-25
• 6.8.4 - 2023-01-17
• 6.8.3 - 2023-01-06
• 6.8.2 - 2022-12-28
• 6.8.1 - 2022-12-19
• 6.8.0 - 2022-12-05
• 6.7.5 - 2022-11-30
• 6.7.4 - 2022-11-28
• 6.7.3 - 2022-11-22
• 6.7.2 - 2022-11-07
• 6.7.1 - 2022-11-02
• 6.7.0 - 2022-10-24
• 6.6.7 - 2022-10-21
• 6.6.6 - 2022-10-20
• 6.6.5 - 2022-10-05
• 6.6.4 - 2022-10-03
• 6.6.3 - 2022-09-30
• 6.6.2 - 2022-09-26
• 6.6.1 - 2022-09-14
• 6.6.0 - 2022-09-08
• 6.5.5 - 2022-09-07
• 6.5.4 - 2022-08-30
• 6.5.3 - 2022-08-25
• 6.5.2 - 2022-08-10
• 6.5.1 - 2022-08-03
• 6.5.0 - 2022-07-26
• 6.4.7 - 2022-07-25
• 6.4.6 - 2022-07-20

from mongoose GitHub release notes

Commit messages

Package name: mongoose

• 20b030e chore: release 6.11.4
• 895bc32 Merge pull request #13614 from Automattic/vkarpov15/gh-13191-2
• b8ebe80 perf: speed up mapOfSubdocs benchmark by 4x by avoiding unnecessary O(n^2) loop in getPathsToValidate()
• dcc4c9a perf: some more small optimizations
• 69405b2 Merge branch '6.x' into vkarpov15/gh-13191-2
• e9eb8ab chore: release 6.11.3
• 688da8f test: fix flakey tests, remove test for #9597 because it affects global state and fails intermittently on deno
• 4f264a8 test: fix tests re: #13317
• 9616af7 fix(schema): correctly handle uuids with populate()
• 305ce4f fix: avoid prototype pollution on init
• f143485 perf: couple of small micro-optimizations re: #13191
• 35e59eb docs: link to migrating to 6 in 6.x docs
• a28933e chore: release 6.11.2
• 3a6b0dd chore: use deno v1.34 in test for MMS HTTP issues
• f7c6d3e Merge pull request #13476 from Automattic/vkarpov15/gh-13453
• a1b7bb5 perf(schema): make some micro optimizations for casting subdocument paths
• 5552107 fix(cursor): allow find middleware to modify query cursor options
• 7a90868 Merge branch '6.x' of github.com:Automattic/mongoose into 6.x
• 23132db chore: release 6.11.1
• d96de21 Merge pull request #13384 from Automattic/vkarpov15/gh-13373
• 0ab335f docs: add note about SUPPRESS_JEST_WARNINGS to jest docs
• eb28aaf fix: quick error message improvement
• 9ea1a64 fix: add SUPPRESS_JEST_WARNINGS environment variable to silence jest warnings
• 76e6456 Merge pull request #13292 from hasezoey/modifyBulkWriteType6

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs