[Snyk] Upgrade mongodb from 3.5.9 to 3.7.4 #5

yeromero · 2023-10-03T08:49:24Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade mongodb from 3.5.9 to 3.7.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 21 versions ahead of your current version.
The recommended version was released 3 months ago, on 2023-06-21.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Remote Memory Exposure SNYK-JS-BL-608877	492/1000 Why? Proof of Concept exploit, CVSS 7.7	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mongodb

3.7.4 - 2023-06-21
The MongoDB Node.js team is pleased to announce version 3.7.4 of the mongodb package!

Release Highlights

This release fixes a bug that throws a type error when SCRAM-SHA-256 is used with saslprep in a webpacked environment.

3.7.4 (2023-06-21)

Bug Fixes
- NODE-3711: retry txn end on retryable write (#3047) (1595140)
- NODE-5355: prevent error when saslprep is not a function (#3733) (152425a)
Documentation
- Reference
- API
- Changelog
We invite you to try the mongodb library immediately, and report any issues to the NODE project.
3.7.3 - 2021-10-20
3.7.2 - 2021-10-05
3.7.1 - 2021-09-14
3.7.0 - 2021-08-31
3.6.12 - 2021-08-30
3.6.11 - 2021-08-05
3.6.10 - 2021-07-06
3.6.9 - 2021-05-26
3.6.8 - 2021-05-21
3.6.7 - 2021-05-18
3.6.6 - 2021-04-06
3.6.5 - 2021-03-16
3.6.4 - 2021-02-02
3.6.3 - 2020-11-06
3.6.2 - 2020-09-10
3.6.1 - 2020-09-02
3.6.0 - 2020-07-30
3.6.0-beta.0 - 2020-04-14
3.5.11 - 2020-09-10
3.5.10 - 2020-07-30
3.5.9 - 2020-06-12

from mongodb GitHub release notes

Commit messages

Package name: mongodb

c2b6da1 chore(release): 3.7.4
152425a fix(NODE-5355): prevent error when saslprep is not a function (#3733)
1595140 fix(NODE-3711): retry txn end on retryable write (#3047)
9b980c4 chore(NODE-3736): fix drivers tools cloning (#3025)
b42e8b3 chore(release): 3.7.3
428e6d3 fix(NODE-3515): do proper opTime merging in bulk results (#3011)
564b0d7 test(NODE-3606): legacy and new versions of the CSFLE library (#3002)
7c5a7bb chore(release): 3.7.2
ec23d63 chore(NODE-3622): bump optional-require for additional yarn berry pnp support (#2989)
28f721d chore(release): 3.7.1
910c564 feat(NODE-3424): use hello for monitoring commands (#2964)
44df7d7 chore(release): 3.7.0
1a76618 fix: versioned api low node compat fix (#2970)
7602f68 docs(NODE-3406): add versioned api examples (#2969)
a07aa56 test(NODE-3409): support AWS temp credentials in CSFLE tests (#2968)
eae0e05 chore(NODE-3303): deprecate md5 hash and isConnected (#2960)
77ab63e test(NODE-3387): correctly extract findOneX values in unified operations (#2966)
96c8ab4 fix(NODE-3377): driver should allow arbitrary explain levels (#2961)
4c25984 chore: sync 3.6 changes to 3.7 (#2963)
e5975af fix(NODE-3463): pass explain error through to callback (#2949)
238a4b0 fix(NODE-3290): versioned api validation and tests (#2869)
91a2fc9 Merge remote-tracking branch 'origin/3.6' into 3.7
6ee945e chore(NODE-3316): add author info and update bug url in package.json (#2887)
ecc930b test(NODE-3381): command monitoring redaction tests (#2873)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade mongodb from 3.5.9 to 3.7.4. See this package in npm: https://www.npmjs.com/package/mongodb See this project in Snyk: https://app.snyk.io/org/yeromero/project/28b1c0bc-e9a0-49b8-a3f7-746ae12df346?utm_source=github&utm_medium=referral&page=upgrade-pr

bridgecrew

Bridgecrew has found errors in this PR ⬇️

bridgecrew · 2023-10-03T08:51:02Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


typeorm 0.2.24 / package.json

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2020-8158 CRITICAL 9.8 0.2.25 Open

bridgecrew · 2023-10-03T08:51:02Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


ansi-regex 4.1.0 / package.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-3807 HIGH 7.5 4.1.1 Open

bridgecrew · 2023-10-03T08:51:02Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


tough-cookie 2.4.3 / package.json

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2023-26136 CRITICAL 9.8 4.1.3 Open

bridgecrew · 2023-10-03T08:51:02Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


underscore 1.9.1 / package.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-23358 HIGH 7.2 1.12.1 Open

bridgecrew · 2023-10-03T08:51:02Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


uglify-js 3.13.9 / package.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

PRISMA-2021-0169 MEDIUM 5.3 3.14.3 Open

bridgecrew · 2023-10-03T08:51:05Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


mquery 1.6.3 / package.json

Total vulnerabilities: 2

Critical: 0 High: 1 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

PRISMA-2021-0060 HIGH - 3.2.5 Open

CVE-2020-35149 MEDIUM 5.3 3.2.3 Open

bridgecrew · 2023-10-03T08:51:05Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


mpath 0.1.1 / package.json

Total vulnerabilities: 2

Critical: 1 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-23438 CRITICAL 9.8 0.8.4 Open

CVE-2018-16490 HIGH 7.5 0.5.1 Open

bridgecrew · 2023-10-03T08:51:05Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


npmconf 0.0.24 / package.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

GHSA-57cf-349j-352g MEDIUM 4 2.1.3 Open

bridgecrew · 2023-10-03T08:51:05Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


decode-uri-component 0.2.0 / package.json

Total vulnerabilities: 2

Critical: 0 High: 1 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-38900 HIGH 7.5 0.2.1 Open

CVE-2022-38778 MEDIUM 6.5 0.2.1 Open

bridgecrew · 2023-10-03T08:51:05Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


mongodb 2.0.46 / package.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

GHSA-mh5c-679w-hh4r HIGH 7 3.1.13 Open

bridgecrew · 2023-10-03T08:51:10Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


qs 2.4.2 / package.json

Total vulnerabilities: 2

Critical: 0 High: 2 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2017-1000048 HIGH 7.5 6.0.4 Open

CVE-2022-24999 HIGH 7.5 6.10.3 Open

bridgecrew · 2023-10-03T08:51:11Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


jquery 2.2.4 / package.json

Total vulnerabilities: 5

Critical: 0 High: 0 Medium: 5 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2020-23064 MEDIUM 6.1 3.5.0 Open

CVE-2015-9251 MEDIUM 6.1 3.0.0 Open

CVE-2020-11023 MEDIUM 6.9 3.5.0 Open

CVE-2020-11022 MEDIUM 6.9 3.5.0 Open

CVE-2019-11358 MEDIUM 6.1 3.4.0 Open

bridgecrew · 2023-10-03T08:51:12Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


mime 1.3.4 / package.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2017-16138 HIGH 7.5 1.4.1 Open

bridgecrew · 2023-10-03T08:51:13Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


ms 0.7.1 / package.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2017-20162 MEDIUM 5.3 2.0.0 Open

bridgecrew · 2023-10-03T08:51:14Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


lodash 4.17.4 / package.json

Total vulnerabilities: 7

Critical: 1 High: 2 Medium: 4 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2019-10744 CRITICAL 9.1 4.17.12 Open

CVE-2021-23337 HIGH 7.2 4.17.21 Open

CVE-2020-8203 HIGH 7.4 4.17.20 Open

CVE-2020-28500 MEDIUM 5.3 4.17.21 Open

CVE-2019-1010266 MEDIUM 6.5 4.17.11 Open

CVE-2018-3721 MEDIUM 6.5 4.17.5 Open

CVE-2018-16487 MEDIUM 5.6 4.17.11 Open

bridgecrew · 2023-10-03T08:51:15Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


async 2.6.3 / package.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-43138 HIGH 7.8 2.6.4 Open

bridgecrew · 2023-10-03T08:51:16Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


mongoose 4.2.4 / package.json

Total vulnerabilities: 5

Critical: 3 High: 1 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-2564 CRITICAL 9.8 6.4.6 Open

CVE-2019-17426 CRITICAL 9.1 - Open

CVE-2023-3696 CRITICAL 9.8 5.13.20 Open

PRISMA-2021-0067 HIGH - 5.12.2 Open

GHSA-r5xw-q988-826m MEDIUM 5.1 4.3.6 Open

bridgecrew · 2023-10-03T08:51:17Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


express-fileupload 0.0.5 / package.json

Total vulnerabilities: 4

Critical: 1 High: 2 Medium: 0 Low: 1

Vulnerability ID Severity CVSS Fixed in Status

CVE-2020-7699 CRITICAL 9.8 1.1.9 Open

PRISMA-2022-0318 HIGH 7.5 1.1.6-alpha.6 Open

PRISMA-2022-0323 HIGH 7.5 1.0.0 Open

GHSA-q3w9-g74q-vp5f LOW 1 1.1.6-alpha.6 Open

bridgecrew · 2023-10-03T08:51:19Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


highlight.js 9.18.1 / package.json

Total vulnerabilities: 2

Critical: 0 High: 1 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2020-26237 HIGH 8.7 9.18.2 Open

GHSA-7wwv-vh3v-89cq MEDIUM 4 10.4.1 Open

bridgecrew · 2023-10-03T08:51:20Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


negotiator 0.5.3 / package.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2016-10539 HIGH 7.5 - Open

bridgecrew · 2023-10-03T08:51:20Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


handlebars 4.0.14 / package.json

Total vulnerabilities: 9

Critical: 3 High: 5 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2019-19919 CRITICAL 9.8 4.3.0 Open

CVE-2021-23383 CRITICAL 9.8 4.7.7 Open

CVE-2021-23369 CRITICAL 9.8 4.7.7 Open

CVE-2019-20922 HIGH 7.5 4.4.5 Open

CVE-2019-20920 HIGH 8.1 4.5.3 Open

GHSA-2cf5-4w76-r9qv HIGH 7 4.5.2 Open

GHSA-g9r4-xpmj-mj65 HIGH 7 4.5.3 Open

GHSA-q2c6-c6pm-g3gh HIGH 7 4.5.3 Open

GHSA-f52g-6jhx-586p MEDIUM 4 4.4.5 Open

bridgecrew · 2023-10-03T08:51:21Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


file-type 8.1.0 / package.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-36313 MEDIUM 5.5 16.5.4 Open

bridgecrew · 2023-10-03T08:51:22Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


minimatch 3.0.4 / package.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-3517 HIGH 7.5 3.0.5 Open

bridgecrew · 2023-10-03T08:51:23Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


hbs 4.0.4 / package.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-32822 MEDIUM 4 - Open

bridgecrew · 2023-10-03T08:51:24Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


fresh 0.2.4 / package.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2017-16119 HIGH 7.5 0.5.2 Open

bridgecrew · 2023-10-03T08:51:26Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


moment 2.15.1 / package.json

Total vulnerabilities: 2

Critical: 0 High: 2 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-24785 HIGH 7.5 2.29.2 Open

CVE-2017-18214 HIGH 7.5 2.19.3 Open

bridgecrew · 2023-10-03T08:51:27Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


ini 1.1.0 / package.json

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2020-7788 CRITICAL 9.8 1.3.6 Open

bridgecrew · 2023-10-03T08:51:28Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


marked 0.3.5 / package.json

Total vulnerabilities: 6

Critical: 0 High: 3 Medium: 3 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2017-16114 HIGH 7.5 0.3.9 Open

CVE-2022-21681 HIGH 7.5 4.0.10 Open

CVE-2022-21680 HIGH 7.5 4.0.10 Open

CVE-2017-1000427 MEDIUM 6.1 0.3.7 Open

CVE-2016-10531 MEDIUM 6.1 - Open

PRISMA-2021-0013 MEDIUM - 1.1.1 Open

bridgecrew · 2023-10-03T08:51:29Z

package.json

@@ -35,7 +35,7 @@
    "marked": "0.3.5",
    "method-override": "latest",
    "moment": "2.15.1",
-    "mongodb": "^3.5.9",
+    "mongodb": "^3.7.4",


kerberos 0.0.24 / package.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2020-13110 HIGH 7.8 1.0.0 Open

bridgecrew bot reviewed Oct 3, 2023

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade mongodb from 3.5.9 to 3.7.4 #5

[Snyk] Upgrade mongodb from 3.5.9 to 3.7.4 #5

yeromero commented Oct 3, 2023

Release Highlights

3.7.4 (2023-06-21)

Bug Fixes

Documentation

bridgecrew bot left a comment

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

bridgecrew bot Oct 3, 2023

Vulnerability ID	Severity	CVSS	Fixed in	Status
PRISMA-2021-0060	HIGH	-	`3.2.5`	Open
CVE-2020-35149	MEDIUM	5.3	`3.2.3`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2021-23438	CRITICAL	9.8	`0.8.4`	Open
CVE-2018-16490	HIGH	7.5	`0.5.1`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2022-38900	HIGH	7.5	`0.2.1`	Open
CVE-2022-38778	MEDIUM	6.5	`0.2.1`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2017-1000048	HIGH	7.5	`6.0.4`	Open
CVE-2022-24999	HIGH	7.5	`6.10.3`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2020-23064	MEDIUM	6.1	`3.5.0`	Open
CVE-2015-9251	MEDIUM	6.1	`3.0.0`	Open
CVE-2020-11023	MEDIUM	6.9	`3.5.0`	Open
CVE-2020-11022	MEDIUM	6.9	`3.5.0`	Open
CVE-2019-11358	MEDIUM	6.1	`3.4.0`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2019-10744	CRITICAL	9.1	`4.17.12`	Open
CVE-2021-23337	HIGH	7.2	`4.17.21`	Open
CVE-2020-8203	HIGH	7.4	`4.17.20`	Open
CVE-2020-28500	MEDIUM	5.3	`4.17.21`	Open
CVE-2019-1010266	MEDIUM	6.5	`4.17.11`	Open
CVE-2018-3721	MEDIUM	6.5	`4.17.5`	Open
CVE-2018-16487	MEDIUM	5.6	`4.17.11`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2022-2564	CRITICAL	9.8	`6.4.6`	Open
CVE-2019-17426	CRITICAL	9.1	`-`	Open
CVE-2023-3696	CRITICAL	9.8	`5.13.20`	Open
PRISMA-2021-0067	HIGH	-	`5.12.2`	Open
GHSA-r5xw-q988-826m	MEDIUM	5.1	`4.3.6`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2020-7699	CRITICAL	9.8	`1.1.9`	Open
PRISMA-2022-0318	HIGH	7.5	`1.1.6-alpha.6`	Open
PRISMA-2022-0323	HIGH	7.5	`1.0.0`	Open
GHSA-q3w9-g74q-vp5f	LOW	1	`1.1.6-alpha.6`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2020-26237	HIGH	8.7	`9.18.2`	Open
GHSA-7wwv-vh3v-89cq	MEDIUM	4	`10.4.1`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2019-19919	CRITICAL	9.8	`4.3.0`	Open
CVE-2021-23383	CRITICAL	9.8	`4.7.7`	Open
CVE-2021-23369	CRITICAL	9.8	`4.7.7`	Open
CVE-2019-20922	HIGH	7.5	`4.4.5`	Open
CVE-2019-20920	HIGH	8.1	`4.5.3`	Open
GHSA-2cf5-4w76-r9qv	HIGH	7	`4.5.2`	Open
GHSA-g9r4-xpmj-mj65	HIGH	7	`4.5.3`	Open
GHSA-q2c6-c6pm-g3gh	HIGH	7	`4.5.3`	Open
GHSA-f52g-6jhx-586p	MEDIUM	4	`4.4.5`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2022-24785	HIGH	7.5	`2.29.2`	Open
CVE-2017-18214	HIGH	7.5	`2.19.3`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2017-16114	HIGH	7.5	`0.3.9`	Open
CVE-2022-21681	HIGH	7.5	`4.0.10`	Open
CVE-2022-21680	HIGH	7.5	`4.0.10`	Open
CVE-2017-1000427	MEDIUM	6.1	`0.3.7`	Open
CVE-2016-10531	MEDIUM	6.1	`-`	Open
PRISMA-2021-0013	MEDIUM	-	`1.1.1`	Open

[Snyk] Upgrade mongodb from 3.5.9 to 3.7.4 #5

Are you sure you want to change the base?

[Snyk] Upgrade mongodb from 3.5.9 to 3.7.4 #5

Conversation

yeromero commented Oct 3, 2023

Snyk has created this PR to upgrade mongodb from 3.5.9 to 3.7.4.

Release Highlights

3.7.4 (2023-06-21)

Bug Fixes

Documentation

bridgecrew bot left a comment

Choose a reason for hiding this comment

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

typeorm 0.2.24 / package.json

Total vulnerabilities: 1

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

ansi-regex 4.1.0 / package.json

Total vulnerabilities: 1

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

tough-cookie 2.4.3 / package.json

Total vulnerabilities: 1

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

underscore 1.9.1 / package.json

Total vulnerabilities: 1

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

uglify-js 3.13.9 / package.json

Total vulnerabilities: 1

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

mquery 1.6.3 / package.json

Total vulnerabilities: 2

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

mpath 0.1.1 / package.json

Total vulnerabilities: 2

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

npmconf 0.0.24 / package.json

Total vulnerabilities: 1

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

decode-uri-component 0.2.0 / package.json

Total vulnerabilities: 2

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

mongodb 2.0.46 / package.json

Total vulnerabilities: 1

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

qs 2.4.2 / package.json

Total vulnerabilities: 2

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

jquery 2.2.4 / package.json

Total vulnerabilities: 5

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

mime 1.3.4 / package.json

Total vulnerabilities: 1

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

ms 0.7.1 / package.json

Total vulnerabilities: 1

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

lodash 4.17.4 / package.json

Total vulnerabilities: 7

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

async 2.6.3 / package.json

Total vulnerabilities: 1

bridgecrew bot Oct 3, 2023

Choose a reason for hiding this comment

mongoose 4.2.4 / package.json

Total vulnerabilities: 5