[Snyk] Security upgrade mongoose from 4.2.4 to 4.7.7

[theodore-dream]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	741/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.4	DLL Injection SNYK-JS-KERBEROS-568900	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: mongoose

The new version differs by 250 commits.

• 66d559b chore: release 4.7.7
• 0504ec6 fix(populate): handle nested virtuals in virtual populate
• b412210 test(populate): repro #4581
• 4efecd5 fix(utils): don't crash if to[key] is null
• 066f128 chore: upgrade mongodb -> 2.2.21
• 370ac04 chore: upgrade bson dep to match mongodb-core
• dd8003b fix: add a toBSON to documents for easier querying
• ab680e4 test: repro #4866
• 075213f chore: upgrade mongodb -> 2.2.20
• e4fb16c chore: actually bump to 2.2.19
• f47260b chore: upgrade mongodb -> 2.2.18
• 344a2b7 chore: remove vestigial log
• 625e5cd Merge branch 'master' of github.com:Automattic/mongoose
• 2c020d1 chore: improve spelling re: #4858
• f921d15 Merge pull request #4854 from davidwu226/master
• 32208ba chore: now working on 4.7.7
• faf2c6a chore: release 4.7.6
• 5a1129a Fix warning from Bluebird:
• 175ad20 fix(query): don't call error handler if passRawResult is true and no error occurred
• d1492ce test(query): repro #4836
• 22552c5 docs(populate): remove implicit Model.populate() example
• 62c8b08 fix(populate): use base model name if no discriminator for backwards compat
• f0aa82d test(populate): repro #4843
• 8f39e1b fix: handle refs correctly even if using browser driver

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.