[Snyk] Upgrade mongoose from 6.5.2 to 6.12.8 #298

rawdaymohamed · 2024-05-17T00:22:31Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade mongoose from 6.5.2 to 6.12.8.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 48 versions ahead of your current version.
The recommended version was released a month ago, on 2024-04-10.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Server-side Request Forgery (SSRF) SNYK-JS-IP-6240864	537/1000 Why? Proof of Concept exploit, CVSS 8.6	Proof of Concept
Prototype Pollution SNYK-JS-MONGOOSE-5777721	537/1000 Why? Proof of Concept exploit, CVSS 8.6	Proof of Concept
Information Exposure SNYK-JS-MONGODB-5871303	537/1000 Why? Proof of Concept exploit, CVSS 8.6	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mongoose

6.12.8 - 2024-04-10
chore: release 6.12.8
6.12.7 - 2024-03-01
6.12.6 - 2024-01-22
6.12.5 - 2024-01-03
6.12.4 - 2023-12-27
6.12.3 - 2023-11-07
6.12.2 - 2023-10-25
6.12.1 - 2023-10-12
6.12.0 - 2023-08-24
6.11.6 - 2023-08-21
6.11.5 - 2023-08-01
6.11.4 - 2023-07-17
6.11.3 - 2023-07-11
6.11.2 - 2023-06-08
6.11.1 - 2023-05-08
6.11.0 - 2023-05-01
6.10.5 - 2023-04-06
6.10.4 - 2023-03-21
6.10.3 - 2023-03-13
6.10.2 - 2023-03-07
6.10.1 - 2023-03-03
6.10.0 - 2023-02-22
6.9.3 - 2023-02-22
6.9.2 - 2023-02-16
6.9.1 - 2023-02-06
6.9.0 - 2023-01-25
6.8.4 - 2023-01-17
6.8.3 - 2023-01-06
6.8.2 - 2022-12-28
6.8.1 - 2022-12-19
6.8.0 - 2022-12-05
6.7.5 - 2022-11-30
6.7.4 - 2022-11-28
6.7.3 - 2022-11-22
6.7.2 - 2022-11-07
6.7.1 - 2022-11-02
6.7.0 - 2022-10-24
6.6.7 - 2022-10-21
6.6.6 - 2022-10-20
6.6.5 - 2022-10-05
6.6.4 - 2022-10-03
6.6.3 - 2022-09-30
6.6.2 - 2022-09-26
6.6.1 - 2022-09-14
6.6.0 - 2022-09-08
6.5.5 - 2022-09-07
6.5.4 - 2022-08-30
6.5.3 - 2022-08-25
6.5.2 - 2022-08-10

from mongoose GitHub release notes

Commit messages

Package name: mongoose

c00a715 chore: release 6.12.8
d3cb2ab Merge pull request #14468 from Automattic/vkarpov15/gh-14446
69a0581 fix(document): handle virtuals that are stored as objects but getter returns string with toJSON
759f0d4 Merge pull request #14458 from Automattic/vkarpov15/gh-14418
bc48379 fix(schematype): consistently set `wasPopulated` to object with `value` property rather than boolean
ed35573 test(document): add test case for #14418
3e63142 fix(document): avoid depopulating populated subdocs underneath document arrays when copying to another document
9ff5e42 Merge pull request #14415 from Automattic/vkarpov15/gh-14376
0d41df3 Update lib/model.js
b46652f docs(model): add extra note about `lean` option for `insertMany()` skipping casting
29f57c1 chore: release 6.12.7
d14d25b Merge pull request #14383 from Automattic/vkarpov15/gh-14113-2
92112dd Merge branch '6.x' into vkarpov15/gh-14113-2
222ad3b chore: pin tmp@0.2.1 re: chore: upgrade rimraf to fix transitive vulnerability raszi/node-tmp#293
b6cb439 Merge branch '6.x' into vkarpov15/gh-14113-2
0af28e0 Merge pull request #14376 from Automattic/vkarpov15/gh-14372
5096630 style: fix lint
867f7b7 test: fix #13335 tests
a9f6614 test: try fixing tests
635c795 perf(document+schema): small optimizations to make `init()` faster
d937726 Merge branch '6.x' into vkarpov15/gh-14372
ac9ea01 test: quick connection string fix
45f5c4c perf(model): make `insertMany()` `lean` option skip hydrating Mongoose docs
5dfb62f test: fix issues with cherry-picking #13376 to 6.x