Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade mongoose from 4.2.4 to 4.13.20 #1

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

@snyk-bot snyk-bot commented Mar 3, 2020

Snyk has created this PR to upgrade mongoose from 4.2.4 to 4.13.20.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 137 versions ahead of your current version.
  • The recommended version was released 2 months ago, on 2020-01-08.

The recommended version fixes:

Severity Issue Exploit Maturity
Remote Memory Exposure
npm:mongoose:20160116
Mature
Release notes
Package name: mongoose
  • 4.13.20 - 2020-01-08
  • 4.13.19 - 2019-07-17
  • 4.13.18 - 2019-01-22
  • 4.13.17 - 2018-08-30
  • 4.13.16 - 2018-08-30
  • 4.13.15 - 2018-08-14
  • 4.13.14 - 2018-05-25
  • 4.13.13 - 2018-05-17
  • 4.13.12 - 2018-03-14
  • 4.13.11 - 2018-02-08
  • 4.13.10 - 2018-01-28
  • 4.13.9 - 2018-01-07
  • 4.13.8 - 2017-12-27
  • 4.13.7 - 2017-12-12
  • 4.13.6 - 2017-12-02
  • 4.13.5 - 2017-11-24
  • 4.13.4 - 2017-11-17
  • 4.13.3 - 2017-11-16
  • 4.13.2 - 2017-11-13
  • 4.13.1 - 2017-11-09
  • 4.13.0 - 2017-11-03
  • 4.12.6 - 2017-11-01
  • 4.12.5 - 2017-10-30
  • 4.12.4 - 2017-10-21
  • 4.12.3 - 2017-10-16
  • 4.12.2 - 2017-10-14
  • 4.12.1 - 2017-10-08
  • 4.12.0 - 2017-10-03
  • 4.11.14 - 2017-09-30
  • 4.11.13 - 2017-09-25
  • 4.11.12 - 2017-09-18
  • 4.11.11 - 2017-09-10
  • 4.11.10 - 2017-09-04
  • 4.11.9 - 2017-08-28
  • 4.11.8 - 2017-08-24
  • 4.11.7 - 2017-08-14
  • 4.11.6 - 2017-08-07
  • 4.11.5 - 2017-07-30
  • 4.11.4 - 2017-07-23
  • 4.11.3 - 2017-07-14
  • 4.11.2 - 2017-07-13
  • 4.11.1 - 2017-07-03
  • 4.11.0 - 2017-06-25
  • 4.10.8 - 2017-06-22
  • 4.10.7 - 2017-06-18
  • 4.10.6 - 2017-06-13
  • 4.10.5 - 2017-06-07
  • 4.10.4 - 2017-05-29
  • 4.10.3 - 2017-05-27
  • 4.10.2 - 2017-05-23
  • 4.10.1 - 2017-05-22
  • 4.10.0 - 2017-05-18
  • 4.9.10 - 2017-05-18
  • 4.9.9 - 2017-05-13
  • 4.9.8 - 2017-05-07
  • 4.9.7 - 2017-05-01
  • 4.9.6 - 2017-04-24
  • 4.9.5 - 2017-04-17
  • 4.9.4 - 2017-04-09
  • 4.9.3 - 2017-04-02
  • 4.9.2 - 2017-03-26
  • 4.9.1 - 2017-03-19
  • 4.9.0 - 2017-03-13
  • 4.8.7 - 2017-03-12
  • 4.8.6 - 2017-03-05
  • 4.8.5 - 2017-02-26
  • 4.8.4 - 2017-02-20
  • 4.8.3 - 2017-02-16
  • 4.8.2 - 2017-02-11
  • 4.8.1 - 2017-01-31
  • 4.8.0 - 2017-01-29
  • 4.7.9 - 2017-01-27
  • 4.7.8 - 2017-01-24
  • 4.7.7 - 2017-01-16
  • 4.7.6 - 2017-01-03
  • 4.7.5 - 2016-12-26
  • 4.7.5-pre - 2016-12-26
  • 4.7.4 - 2016-12-20
  • 4.7.3 - 2016-12-16
  • 4.7.2 - 2016-12-08
  • 4.7.1 - 2016-12-01
  • 4.7.0 - 2016-11-23
  • 4.6.8 - 2016-11-15
  • 4.6.7 - 2016-11-10
  • 4.6.6 - 2016-11-03
  • 4.6.5 - 2016-10-24
  • 4.6.4 - 2016-10-17
  • 4.6.3 - 2016-10-06
  • 4.6.2 - 2016-10-01
  • 4.6.1 - 2016-09-20
  • 4.6.0 - 2016-09-02
  • 4.5.10 - 2016-08-23
  • 4.5.9 - 2016-08-14
  • 4.5.8 - 2016-08-01
  • 4.5.7 - 2016-07-25
  • 4.5.6 - 2016-07-23
  • 4.5.5 - 2016-07-18
  • 4.5.4 - 2016-07-11
  • 4.5.3 - 2016-07-01
  • 4.5.2 - 2016-06-25
  • 4.5.1 - 2016-06-18
  • 4.5.0 - 2016-06-13
  • 4.4.20 - 2016-06-05
  • 4.4.19 - 2016-05-21
  • 4.4.18 - 2016-05-21
  • 4.4.17 - 2016-05-13
  • 4.4.16 - 2016-05-09
  • 4.4.15 - 2016-05-06
  • 4.4.14 - 2016-04-27
  • 4.4.13 - 2016-04-21
  • 4.4.12 - 2016-04-08
  • 4.4.11 - 2016-04-03
  • 4.4.10 - 2016-03-24
  • 4.4.9 - 2016-03-23
  • 4.4.8 - 2016-03-18
  • 4.4.7 - 2016-03-11
  • 4.4.6 - 2016-03-03
  • 4.4.5 - 2016-02-24
  • 4.4.4 - 2016-02-17
  • 4.4.3 - 2016-02-09
  • 4.4.2 - 2016-02-05
  • 4.4.1 - 2016-02-03
  • 4.4.0 - 2016-02-02
  • 4.3.7 - 2016-01-23
  • 4.3.6 - 2016-01-15
  • 4.3.5 - 2016-01-09
  • 4.3.4 - 2015-12-23
  • 4.3.3 - 2015-12-18
  • 4.3.2 - 2015-12-17
  • 4.3.1 - 2015-12-11
  • 4.3.0 - 2015-12-09
  • 4.2.10 - 2015-12-08
  • 4.2.9 - 2015-12-02
  • 4.2.8 - 2015-11-25
  • 4.2.7 - 2015-11-20
  • 4.2.6 - 2015-11-16
  • 4.2.5 - 2015-11-09
  • 4.2.4 - 2015-11-02
from mongoose GitHub release notes
Commit messages
Package name: mongoose
  • 1db031c test(schema): clean up messy tests re: #8459
  • 8fa8012 test: test cleanup re: #8459
  • 4a55040 chore: remove problematic mongoose-long dep and use mongodb 3.4 in tests
  • 91f95da chore: run consistent mongod version in tests
  • 0e65e6e chore: release 4.13.20
  • 803090d fix(schema): make aliases handle mongoose-lean-virtuals
  • 6a8b381 chore: add .config.js to gitignore and npmignore
  • f51c4aa chore: release 4.13.19
  • 2aeeaa8 Merge pull request #7950 from cdimitroulas/backport-aggregate-options-bugfix
  • b10cc98 rename aggregation option test
  • d9a2027 fix bug: Using options in aggregates doesn't set anything
  • 75daf18 chore: release 4.13.18
  • 8c75e9b chore: dont run nsp
  • c8b8720 style: fix lint
  • edf70e4 fix(cast): backport fix from #7290 to 4.x
  • 29f6709 fix(model): handle setting populated path set via `Document#populate()`
  • 0e1772f test(document): repro #7302
  • 2370f97 chore: now working on 4.13.18
  • 4545d44 chore: release 4.13.17
  • fb8b644 fix(document): disallow setting constructor and prototype if strict mode false
  • b33d8c2 style: fix lint
  • df93f5b chore: release 4.13.16
  • a3b98f6 fix(document): disallow setting __proto__ if strict mode false
  • a738273 Merge pull request #6928 from hellodigit/4.x-modifiedpaths-pr

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant