[Snyk] Upgrade mongoose from 5.3.9 to 5.13.5 by snyk-bot · Pull Request #1 · schlattk/database_server_mdb

snyk-bot · 2021-08-23T20:53:01Z

Snyk has created this PR to upgrade mongoose from 5.3.9 to 5.13.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 180 versions ahead of your current version.
The recommended version was released 24 days ago, on 2021-07-30.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Prototype Pollution SNYK-JS-MQUERY-1089718	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-MQUERY-1050858	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept
Denial of Service (DoS) SNYK-JS-MONGODB-473855	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	No Known Exploit
Internal Property Tampering SNYK-JS-BSON-561052	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	No Known Exploit
Information Exposure SNYK-JS-MONGOOSE-472486	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-MONGOOSE-1086688	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mongoose

5.13.5 - 2021-07-30
chore: release 5.13.5
5.13.4 - 2021-07-28
chore: release 5.13.4
5.13.3 - 2021-07-16
chore: release 5.13.3
5.13.2 - 2021-07-03
chore: release 5.13.2
5.13.1 - 2021-07-02
chore: release 5.13.1
5.13.0 - 2021-06-28
chore: release 5.13.0
5.12.15 - 2021-06-25
5.12.14 - 2021-06-15
5.12.13 - 2021-06-04
5.12.12 - 2021-05-28
5.12.11 - 2021-05-24
5.12.10 - 2021-05-18
5.12.9 - 2021-05-13
5.12.8 - 2021-05-10
5.12.7 - 2021-04-29
5.12.6 - 2021-04-27
5.12.5 - 2021-04-19
5.12.4 - 2021-04-15
5.12.3 - 2021-03-31
5.12.2 - 2021-03-22
5.12.1 - 2021-03-18
5.12.0 - 2021-03-11
5.11.20 - 2021-03-11
5.11.19 - 2021-03-05
5.11.18 - 2021-02-23
5.11.17 - 2021-02-17
5.11.16 - 2021-02-12
5.11.15 - 2021-02-03
5.11.14 - 2021-01-28
5.11.13 - 2021-01-20
5.11.12 - 2021-01-14
5.11.11 - 2021-01-08
5.11.10 - 2021-01-04
5.11.9 - 2020-12-28
5.11.8 - 2020-12-14
5.11.7 - 2020-12-10
5.11.6 - 2020-12-09
5.11.5 - 2020-12-07
5.11.4 - 2020-12-04
5.11.3 - 2020-12-03
5.11.2 - 2020-12-02
5.11.1 - 2020-12-01
5.11.0 - 2020-11-30
5.10.19 - 2020-11-30
5.10.18 - 2020-11-29
5.10.17 - 2020-11-27
5.10.16 - 2020-11-25
5.10.15 - 2020-11-16
5.10.14 - 2020-11-12
5.10.13 - 2020-11-06
5.10.12 - 2020-11-04
5.10.11 - 2020-10-26
5.10.10 - 2020-10-23
5.10.9 - 2020-10-09
5.10.8 - 2020-10-05
5.10.7 - 2020-09-24
5.10.6 - 2020-09-18
5.10.5 - 2020-09-11
5.10.4 - 2020-09-09
5.10.3 - 2020-09-03
5.10.2 - 2020-08-28
5.10.1 - 2020-08-26
5.10.0 - 2020-08-14
5.9.29 - 2020-08-13
5.9.28 - 2020-08-07
5.9.27 - 2020-07-31
5.9.26 - 2020-07-27
5.9.25 - 2020-07-17
5.9.24 - 2020-07-13
5.9.23 - 2020-07-10
5.9.22 - 2020-07-06
5.9.21 - 2020-07-01
5.9.20 - 2020-06-22
5.9.19 - 2020-06-15
5.9.18 - 2020-06-05
5.9.17 - 2020-06-02
5.9.16 - 2020-05-25
5.9.15 - 2020-05-18
5.9.14 - 2020-05-13
5.9.13 - 2020-05-08
5.9.12 - 2020-05-04
5.9.11 - 2020-04-30
5.9.10 - 2020-04-20
5.9.9 - 2020-04-13
5.9.7 - 2020-03-30
5.9.6 - 2020-03-23
5.9.5 - 2020-03-16
5.9.4 - 2020-03-09
5.9.3 - 2020-03-02
5.9.2 - 2020-02-21
5.9.1 - 2020-02-14
5.9.0 - 2020-02-13
5.8.13 - 2020-02-13
5.8.12 - 2020-02-12
5.8.11 - 2020-01-31
5.8.10 - 2020-01-27
5.8.9 - 2020-01-17
5.8.7 - 2020-01-10
5.8.6 - 2020-01-08
5.8.5 - 2020-01-06
5.8.4 - 2020-01-02
5.8.3 - 2019-12-23
5.8.2 - 2019-12-20
5.8.1 - 2019-12-12
5.8.0 - 2019-12-09
5.7.14 - 2019-12-06
5.7.13 - 2019-11-29
5.7.12 - 2019-11-19
5.7.11 - 2019-11-14
5.7.10 - 2019-11-11
5.7.9 - 2019-11-08
5.7.8 - 2019-11-05
5.7.7 - 2019-10-24
5.7.6 - 2019-10-21
5.7.5 - 2019-10-14
5.7.4 - 2019-10-09
5.7.3 - 2019-09-30
5.7.1 - 2019-09-13
5.7.0 - 2019-09-09
5.6.13 - 2019-09-06
5.6.12 - 2019-09-03
5.6.11 - 2019-08-25
5.6.10 - 2019-08-21
5.6.9 - 2019-08-07
5.6.8 - 2019-08-02
5.6.7 - 2019-07-26
5.6.6 - 2019-07-22
5.6.5 - 2019-07-17
5.6.4 - 2019-07-08
5.6.3 - 2019-07-03
5.6.2 - 2019-06-28
5.6.1 - 2019-06-24
5.6.0 - 2019-06-14
5.5.15 - 2019-06-12
5.5.14 - 2019-06-08
5.5.13 - 2019-06-05
5.5.12 - 2019-05-31
5.5.11 - 2019-05-23
5.5.10 - 2019-05-20
5.5.9 - 2019-05-16
5.5.8 - 2019-05-13
5.5.7 - 2019-05-09
5.5.6 - 2019-05-06
5.5.5 - 2019-04-30
5.5.4 - 2019-04-25
5.5.3 - 2019-04-22
5.5.2 - 2019-04-16
5.5.1 - 2019-04-11
5.5.0 - 2019-04-08
5.4.23 - 2019-04-08
5.4.22 - 2019-04-04
5.4.21 - 2019-04-02
5.4.20 - 2019-03-25
5.4.19 - 2019-03-11
5.4.18 - 2019-03-08
5.4.17 - 2019-03-03
5.4.16 - 2019-02-26
5.4.15 - 2019-02-23
5.4.14 - 2019-02-19
5.4.13 - 2019-02-15
5.4.12 - 2019-02-13
5.4.11 - 2019-02-09
5.4.10 - 2019-02-05
5.4.9 - 2019-02-01
5.4.8 - 2019-01-30
5.4.7 - 2019-01-26
5.4.6 - 2019-01-22
5.4.5 - 2019-01-18
5.4.4 - 2019-01-14
5.4.3 - 2019-01-09
5.4.2 - 2019-01-03
5.4.1 - 2018-12-26
5.4.0 - 2018-12-14
5.3.16 - 2018-12-11
5.3.15 - 2018-12-05
5.3.14 - 2018-11-27
5.3.13 - 2018-11-20
5.3.12 - 2018-11-13
5.3.11 - 2018-11-09
5.3.10 - 2018-11-06
5.3.9 - 2018-11-02

from mongoose GitHub release notes

Commit messages

Package name: mongoose

c36bd64 chore: release 5.13.5
b33599c Merge pull request #10510 from thiagokisaki/gh-10504
d88f981 Merge pull request #10515 from andreialecu/perf-types
9c41c19 perf: improve typescript type checking performance
f1e0de1 Merge pull request #10501 from gfrancz/patch-1
ae819cc fix(index.d.ts): fix `debug` type in `MongooseOptions`
28b1aa3 fix: get rid of hardcoding of @ types/node re: node: Make Buffer mergeable DefinitelyTyped/DefinitelyTyped#54479
b82aa37 Update depopulate documentation for document.js
6b33a7b chore: release 5.13.4
060039d fix(index.d.ts): improve autocomplete for `new Model()` by making `doc` an object with correct keys
2066180 fix(map): correctly clone subdocs when calling `toObject()` on a map
7793065 test(map): repro #10486
1be924d style: fix lint
c05e7f6 Merge branch 'master' of github.com:Automattic/mongoose
b6beb3e fix(update): support overwriting nested map paths
926533f test: repro #10485
fcbadbc Merge pull request #10494 from juhdanad/lean-populated
0afa2ba Merge branch 'master' of github.com:Automattic/mongoose
e2d94cb docs(mongoose+connection): correct default value for bufferTimeoutMS
0ff1c8a Merge pull request #10464 from AbdelrahmanHafez/gh-10437
fa4094a chore: peg optional-require to v1.0.x re: restore compatibility with node v4 and v5 jchip/optional-require#6
257adc4 fix(update): apply timestamps to subdocs that would be newly created by `$setOnInsert`
1589af2 fix(cursor): cap parallel batchSize for populate at 5000
4640bee style: fix lint