[Snyk] Upgrade mongoose from 6.4.1 to 6.12.8

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade mongoose from 6.4.1 to 6.12.8.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

- The recommended version is **57 versions** ahead of your current version. - The recommended version was released **a month ago**, on 2024-04-10. The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:-------------------------

| Server-side Request Forgery (SSRF)
[SNYK-JS-IP-6240864](https://snyk.io/vuln/SNYK-JS-IP-6240864) | **537/1000**
**Why?** Proof of Concept exploit, CVSS 8.6 | Proof of Concept

| Prototype Pollution
[SNYK-JS-MONGOOSE-2961688](https://snyk.io/vuln/SNYK-JS-MONGOOSE-2961688) | **537/1000**
**Why?** Proof of Concept exploit, CVSS 8.6 | Proof of Concept

| Prototype Pollution
[SNYK-JS-MONGOOSE-5777721](https://snyk.io/vuln/SNYK-JS-MONGOOSE-5777721) | **537/1000**
**Why?** Proof of Concept exploit, CVSS 8.6 | Proof of Concept

| Information Exposure
[SNYK-JS-MONGODB-5871303](https://snyk.io/vuln/SNYK-JS-MONGODB-5871303) | **537/1000**
**Why?** Proof of Concept exploit, CVSS 8.6 | No Known Exploit (*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mongoose

6.12.8 - 2024-04-10

chore: release 6.12.8

  </li>
  <li>
    <b>6.12.7</b> - 2024-03-01
  </li>
  <li>
    <b>6.12.6</b> - 2024-01-22
  </li>
  <li>
    <b>6.12.5</b> - 2024-01-03
  </li>
  <li>
    <b>6.12.4</b> - 2023-12-27
  </li>
  <li>
    <b>6.12.3</b> - 2023-11-07
  </li>
  <li>
    <b>6.12.2</b> - 2023-10-25
  </li>
  <li>
    <b>6.12.1</b> - 2023-10-12
  </li>
  <li>
    <b>6.12.0</b> - 2023-08-24
  </li>
  <li>
    <b>6.11.6</b> - 2023-08-21
  </li>
  <li>
    <b>6.11.5</b> - 2023-08-01
  </li>
  <li>
    <b>6.11.4</b> - 2023-07-17
  </li>
  <li>
    <b>6.11.3</b> - 2023-07-11
  </li>
  <li>
    <b>6.11.2</b> - 2023-06-08
  </li>
  <li>
    <b>6.11.1</b> - 2023-05-08
  </li>
  <li>
    <b>6.11.0</b> - 2023-05-01
  </li>
  <li>
    <b>6.10.5</b> - 2023-04-06
  </li>
  <li>
    <b>6.10.4</b> - 2023-03-21
  </li>
  <li>
    <b>6.10.3</b> - 2023-03-13
  </li>
  <li>
    <b>6.10.2</b> - 2023-03-07
  </li>
  <li>
    <b>6.10.1</b> - 2023-03-03
  </li>
  <li>
    <b>6.10.0</b> - 2023-02-22
  </li>
  <li>
    <b>6.9.3</b> - 2023-02-22
  </li>
  <li>
    <b>6.9.2</b> - 2023-02-16
  </li>
  <li>
    <b>6.9.1</b> - 2023-02-06
  </li>
  <li>
    <b>6.9.0</b> - 2023-01-25
  </li>
  <li>
    <b>6.8.4</b> - 2023-01-17
  </li>
  <li>
    <b>6.8.3</b> - 2023-01-06
  </li>
  <li>
    <b>6.8.2</b> - 2022-12-28
  </li>
  <li>
    <b>6.8.1</b> - 2022-12-19
  </li>
  <li>
    <b>6.8.0</b> - 2022-12-05
  </li>
  <li>
    <b>6.7.5</b> - 2022-11-30
  </li>
  <li>
    <b>6.7.4</b> - 2022-11-28
  </li>
  <li>
    <b>6.7.3</b> - 2022-11-22
  </li>
  <li>
    <b>6.7.2</b> - 2022-11-07
  </li>
  <li>
    <b>6.7.1</b> - 2022-11-02
  </li>
  <li>
    <b>6.7.0</b> - 2022-10-24
  </li>
  <li>
    <b>6.6.7</b> - 2022-10-21
  </li>
  <li>
    <b>6.6.6</b> - 2022-10-20
  </li>
  <li>
    <b>6.6.5</b> - 2022-10-05
  </li>
  <li>
    <b>6.6.4</b> - 2022-10-03
  </li>
  <li>
    <b>6.6.3</b> - 2022-09-30
  </li>
  <li>
    <b>6.6.2</b> - 2022-09-26
  </li>
  <li>
    <b>6.6.1</b> - 2022-09-14
  </li>
  <li>
    <b>6.6.0</b> - 2022-09-08
  </li>
  <li>
    <b>6.5.5</b> - 2022-09-07
  </li>
  <li>
    <b>6.5.4</b> - 2022-08-30
  </li>
  <li>
    <b>6.5.3</b> - 2022-08-25
  </li>
  <li>
    <b>6.5.2</b> - 2022-08-10
  </li>
  <li>
    <b>6.5.1</b> - 2022-08-03
  </li>
  <li>
    <b>6.5.0</b> - 2022-07-26
  </li>
  <li>
    <b>6.4.7</b> - 2022-07-25
  </li>
  <li>
    <b>6.4.6</b> - 2022-07-20
  </li>
  <li>
    <b>6.4.5</b> - 2022-07-18
  </li>
  <li>
    <b>6.4.4</b> - 2022-07-08
  </li>
  <li>
    <b>6.4.3</b> - 2022-07-05
  </li>
  <li>
    <b>6.4.2</b> - 2022-07-01
  </li>
  <li>
    <b>6.4.1</b> - 2022-06-27
  </li>
</ul>
from <a href="https://snyk.io/redirect/github/Automattic/mongoose/releases">mongoose GitHub release notes</a>

Commit messages

Package name: mongoose

c00a715 chore: release 6.12.8
d3cb2ab Merge pull request #14468 from Automattic/vkarpov15/gh-14446
69a0581 fix(document): handle virtuals that are stored as objects but getter returns string with toJSON
759f0d4 Merge pull request #14458 from Automattic/vkarpov15/gh-14418
bc48379 fix(schematype): consistently set `wasPopulated` to object with `value` property rather than boolean
ed35573 test(document): add test case for #14418
3e63142 fix(document): avoid depopulating populated subdocs underneath document arrays when copying to another document
9ff5e42 Merge pull request #14415 from Automattic/vkarpov15/gh-14376
0d41df3 Update lib/model.js
b46652f docs(model): add extra note about `lean` option for `insertMany()` skipping casting
29f57c1 chore: release 6.12.7
d14d25b Merge pull request #14383 from Automattic/vkarpov15/gh-14113-2
92112dd Merge branch '6.x' into vkarpov15/gh-14113-2
222ad3b chore: pin tmp@0.2.1 re: raszi/node-tmp#293
b6cb439 Merge branch '6.x' into vkarpov15/gh-14113-2
0af28e0 Merge pull request #14376 from Automattic/vkarpov15/gh-14372
5096630 style: fix lint
867f7b7 test: fix #13335 tests
a9f6614 test: try fixing tests
635c795 perf(document+schema): small optimizations to make `init()` faster
d937726 Merge branch '6.x' into vkarpov15/gh-14372
ac9ea01 test: quick connection string fix
45f5c4c perf(model): make `insertMany()` `lean` option skip hydrating Mongoose docs
5dfb62f test: fix issues with cherry-picking #13376 to 6.x

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

FlorentinTh / LE2ML-API

[Snyk] Upgrade mongoose from 6.4.1 to 6.12.8 #945

Snyk has created this PR to upgrade mongoose from 6.4.1 to 6.12.8.