[Snyk] Upgrade mongoose from 5.12.3 to 5.13.22

[Ash110]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade mongoose from 5.12.3 to 5.13.22.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

✨ Snyk has automatically assigned this pull request, set who gets assigned.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 35 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2024-01-02.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-MONGOOSE-2961688	671/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7	Proof of Concept
	Prototype Pollution SNYK-JS-MONGOOSE-5777721	671/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7	Proof of Concept
	Prototype Pollution SNYK-JS-MPATH-1577289	671/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mongoose

• 5.13.22 - 2024-01-02
  

  chore: release 5.13.22

• 5.13.21 - 2023-10-19
• 5.13.20 - 2023-07-12
• 5.13.19 - 2023-06-22
• 5.13.18 - 2023-06-22
• 5.13.17 - 2023-04-04
• 5.13.16 - 2023-02-20
• 5.13.15 - 2022-08-22
• 5.13.14 - 2021-12-27
• 5.13.13 - 2021-11-02
• 5.13.12 - 2021-10-19
• 5.13.11 - 2021-10-12
• 5.13.10 - 2021-10-05
• 5.13.9 - 2021-09-06
• 5.13.8 - 2021-08-23
• 5.13.7 - 2021-08-11
• 5.13.6 - 2021-08-09
• 5.13.5 - 2021-07-30
• 5.13.4 - 2021-07-28
• 5.13.3 - 2021-07-16
• 5.13.2 - 2021-07-03
• 5.13.1 - 2021-07-02
• 5.13.0 - 2021-06-28
• 5.12.15 - 2021-06-25
• 5.12.14 - 2021-06-15
• 5.12.13 - 2021-06-04
• 5.12.12 - 2021-05-28
• 5.12.11 - 2021-05-24
• 5.12.10 - 2021-05-18
• 5.12.9 - 2021-05-13
• 5.12.8 - 2021-05-10
• 5.12.7 - 2021-04-29
• 5.12.6 - 2021-04-27
• 5.12.5 - 2021-04-19
• 5.12.4 - 2021-04-15
• 5.12.3 - 2021-03-31

from mongoose GitHub release notes

Commit messages

Package name: mongoose

• 2642bb5 chore: release 5.13.22
• e894fe8 types: add `skipValidation`, `strict`, `timestamps` as options for bulkWrite()
• c5fa9b4 fix: also allow setting nested field to undefined re: #14205
• 66e5c1b fix: fix some merge issues with #14226 re: #14205
• a96164e fix(document): allow setting nested path to `null`
• 7ff7e33 perf(schema): remove unnecessary lookahead in numeric subpath check
• 09c55b3 pin another version for node 4 build
• a1c9fb1 chore: fix typo
• 7bd07d9 try pinning @ types/babylon dep to fix build issues
• 21639c8 chore: release 5.13.21
• 78257e2 Merge pull request #13670 from Automattic/IslandRhythms/backport-pull-12954
• 443092a add back `uniqueDocs`
• e7ff415 fix: lint
• deedb88 backport GeoNear to 5.x
• 11bb2c4 Merge pull request #13655 from Automattic/IslandRhythms/backport-npm
• 702b4a0 Update .npmignore
• 0f3997a chore: release 5.13.20
• f1efabf fix: avoid prototype pollution on init
• 98e0762 chore: release 5.13.19
• 7e36d21 chore: release 5.13.18
• 6759c60 undo accidental changes and actually pin @ types/json-schema
• 4ed4a89 chore: pin version of @ types/json-schema because of install issues on node v4 and v6
• 9a9536d Merge pull request #13535 from lorand-horvath/patch-12
• 26424d5 5.x - bump mongodb driver to 3.7.4

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs