[Snyk] Upgrade mongoose from 5.1.6 to 5.10.9

Snyk has created this PR to upgrade mongoose from 5.1.6 to 5.10.9.

merge advice

:sparkles: Snyk has automatically assigned this pull request, set who gets assigned. :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 158 versions ahead of your current version.
The recommended version was released 25 days ago, on 2020-10-09.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Prototype Pollution SNYK-JS-MPATH-72672	579/1000 Why? Has a fix available, CVSS 7.3	No Known Exploit
Denial of Service (DoS) SNYK-JS-MONGODB-473855	579/1000 Why? Has a fix available, CVSS 7.3	No Known Exploit
Internal Property Tampering SNYK-JS-BSON-561052	579/1000 Why? Has a fix available, CVSS 7.3	No Known Exploit
Information Exposure SNYK-JS-MONGOOSE-472486	579/1000 Why? Has a fix available, CVSS 7.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mongoose

from mongoose GitHub release notes

Commit messages

Package name: mongoose

e406afa chore: release 5.10.9
c44eeb0 fix(update): strip out unused array filters to avoid "filter was not used in the update" error
6538e49 test(update): repro #9468
0335578 fix(mongoose): allow setting `autoCreate` as a global option to be consistent with `autoIndex`
690bacb chore: update opencollective sponsors
0c4cd42 chore: release 5.10.8
be06df8 chore: get rid of unnecessary log statement
e037a95 test: fix tests
037eb14 fix(schema): avoid subdoc nested paths when getting schema paths for update
2da4cb3 test(document): correct test title
978d695 fix(schema): handle setting nested paths underneath single nested subdocs
18973c0 test(document): repro #9459
4da58f8 docs(connections): add SSL connections doc
44d5199 fix(document): track `reason` on cast errors that occur while init-ing a document
049b6e2 test(document): repro #9448
b4be141 fix(model): make `createCollection()` not throw error when collection already exists to be consistent with v5.9
b905d0c test(model): repro #9447
021326c Merge pull request #9458 from craig-davis/tutorial-spelling-error
9499c31 Merge pull request #9457 from PenguinToast/fix-transaction-array-save
8169ac3 Fix minor documentation spelling errors
d02c385 fix(transaction): fix saving new documents w/ arrays in transactions
c031898 fix(schema+index): allow calling `mongoose.model()` with schema from a different Mongoose module instance
e167926 chore: update opencollective sponsors
523e614 chore: add rel="sponsored" to opencollective links

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

vergissberlin / andrelademann-de-express

[Snyk] Upgrade mongoose from 5.1.6 to 5.10.9 #111

Snyk has created this PR to upgrade mongoose from 5.1.6 to 5.10.9.