[Snyk] Upgrade mongoose from 6.2.2 to 6.11.6 #583

DanneelsSophie · 2023-09-12T14:14:33Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade mongoose from 6.2.2 to 6.11.6.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 69 versions ahead of your current version.
The recommended version was released 22 days ago, on 2023-08-21.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-MONGOOSE-2961688	671/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7	Proof of Concept
	Prototype Pollution SNYK-JS-MONGOOSE-5777721	671/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mongoose

6.11.6 - 2023-08-21
chore: release 6.11.6
6.11.5 - 2023-08-01
chore: release 6.11.5
6.11.4 - 2023-07-17
6.11.3 - 2023-07-11
6.11.2 - 2023-06-08
6.11.1 - 2023-05-08
6.11.0 - 2023-05-01
6.10.5 - 2023-04-06
6.10.4 - 2023-03-21
6.10.3 - 2023-03-13
6.10.2 - 2023-03-07
6.10.1 - 2023-03-03
6.10.0 - 2023-02-22
6.9.3 - 2023-02-22
6.9.2 - 2023-02-16
6.9.1 - 2023-02-06
6.9.0 - 2023-01-25
6.8.4 - 2023-01-17
6.8.3 - 2023-01-06
6.8.2 - 2022-12-28
6.8.1 - 2022-12-19
6.8.0 - 2022-12-05
6.7.5 - 2022-11-30
6.7.4 - 2022-11-28
6.7.3 - 2022-11-22
6.7.2 - 2022-11-07
6.7.1 - 2022-11-02
6.7.0 - 2022-10-24
6.6.7 - 2022-10-21
6.6.6 - 2022-10-20
6.6.5 - 2022-10-05
6.6.4 - 2022-10-03
6.6.3 - 2022-09-30
6.6.2 - 2022-09-26
6.6.1 - 2022-09-14
6.6.0 - 2022-09-08
6.5.5 - 2022-09-07
6.5.4 - 2022-08-30
6.5.3 - 2022-08-25
6.5.2 - 2022-08-10
6.5.1 - 2022-08-03
6.5.0 - 2022-07-26
6.4.7 - 2022-07-25
6.4.6 - 2022-07-20
6.4.5 - 2022-07-18
6.4.4 - 2022-07-08
6.4.3 - 2022-07-05
6.4.2 - 2022-07-01
6.4.1 - 2022-06-27
6.4.0 - 2022-06-17
6.3.9 - 2022-06-17
6.3.8 - 2022-06-13
6.3.7 - 2022-06-13
6.3.6 - 2022-06-07
6.3.5 - 2022-05-30
6.3.4 - 2022-05-19
6.3.3 - 2022-05-09
6.3.2 - 2022-05-02
6.3.1 - 2022-04-21
6.3.0 - 2022-04-14
6.2.11 - 2022-04-13
6.2.10 - 2022-04-04
6.2.9 - 2022-03-28
6.2.8 - 2022-03-23
6.2.7 - 2022-03-16
6.2.6 - 2022-03-11
6.2.5 - 2022-03-09
6.2.4 - 2022-02-28
6.2.3 - 2022-02-21
6.2.2 - 2022-02-16

from mongoose GitHub release notes

Commit messages

Package name: mongoose

0604133 chore: release 6.11.6
c1109ac Merge pull request #13723 from Automattic/IslandRhythms/backport-13515
557a472 Update mongo.test.ts
bab0e9e Update package.json
0ae1367 backport pull 13515
d4a1080 Merge pull request #13701 from JavaScriptBach/backport-bulkwrite
6f5adfb lint
c520587 Backport empty bulkwrite fix #13684 to Mongoose v6
be5b7d5 chore: release 6.11.5
d5784d8 Merge pull request #13682 from Automattic/vkarpov15/gh-13626-2
1a9f1b3 fix(document): correctly set index when casting subdocs for validation re: #13626
622fa1c Merge pull request #13671 from Automattic/vkarpov15/gh-13626
d012888 fix(schema): make `Schema.prototype.clone()` avoid creating different copies of subdocuments and single nested paths underneath single nested paths
0d17ccb Merge pull request #13637 from Automattic/IslandRhythms/gh-13364-backport
1b09cb1 backported
20b030e chore: release 6.11.4
895bc32 Merge pull request #13614 from Automattic/vkarpov15/gh-13191-2
b8ebe80 perf: speed up mapOfSubdocs benchmark by 4x by avoiding unnecessary O(n^2) loop in getPathsToValidate()
dcc4c9a perf: some more small optimizations
69405b2 Merge branch '6.x' into vkarpov15/gh-13191-2
e9eb8ab chore: release 6.11.3
688da8f test: fix flakey tests, remove test for #9597 because it affects global state and fails intermittently on deno
4f264a8 test: fix tests re: #13317
9616af7 fix(schema): correctly handle uuids with populate()