[Snyk] Upgrade mongoose from 6.9.1 to 6.10.5

[snyk-bot]

Snyk has created this PR to upgrade mongoose from 6.9.1 to 6.10.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2023-04-06.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-FASTXMLPARSER-3325616	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mongoose

• 6.10.5 - 2023-04-06
  

  chore: release 6.10.5

• 6.10.4 - 2023-03-21
  

  chore: release 6.10.4

• 6.10.3 - 2023-03-13
  

  chore: release 6.10.3

• 6.10.2 - 2023-03-07
  

  chore: release 6.10.2

• 6.10.1 - 2023-03-03
• 6.10.0 - 2023-02-22
• 6.9.3 - 2023-02-22
• 6.9.2 - 2023-02-16
• 6.9.1 - 2023-02-06

from mongoose GitHub release notes

Commit messages

Package name: mongoose

• 02b9b2b chore: release 6.10.5
• 87a9a7f Merge pull request #13251 from Automattic/vkarpov15/gh-13193
• 25c7535 Merge pull request #13218 from Automattic/vkarpov15/gh-13176
• c1ceb12 Update docs/source/index.js
• 90527df fix: quick fix to support getters for fast path in get() re: #12953
• f2d187c Merge pull request #13254 from Automattic/vkarpov15/gh-12953
• ace37a3 Update docs/check-version.md
• fb93510 Update docs/check-version.md
• 24f42db Update docs/source/index.js
• beeed2a test: avoid importing VirtualType directly to avoid driver issues re: #12953
• 84e9dc1 test: try bumping stack trace limit in deno to debug weird test failure
• 5b20ecd chore(benchmarks): add benchmark for #12953
• ac8a7a5 perf: trim some more unnecessary work from getter re: #12953
• c8e0215 perf: avoid further unnecessary string manipulation when accessing a plain top-level path
• 5d508c2 perf(document): avoid unnecessary loops and conditionals on Document.prototype.get() re: #12953
• 36df3a0 refactor: quick fix re: code review comments
• 3946889 Merge branch '6.x' into vkarpov15/gh-13176
• ae93efe docs: add version support and check version docs
• 1aa67cf Merge pull request #13249 from Automattic/IslandRhythms/error-clarification
• 25dae8d made requested changes
• 71fd226 clearer error message
• 3005f64 more 5.x merge conflict fixes
• f31cb90 fix merge conflict from 5.x
• 2d0c93d Merge branch '5.x' into 6.x

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs