[Snyk] Security upgrade mongoose from 7.4.1 to 7.5.0
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
 |
496/1000 Why? Recently disclosed, Has a fix available, CVSS 4.2 |
Information Exposure SNYK-JS-MONGODB-5871303 |
No | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: mongoose
The new version differs by 168 commits.- 20162c6 chore: release 7.5.0
- 1cd9384 Merge pull request #13796 from Automattic/7.5
- 419c64d docs: add comment about top-level dollar keys re: #13796 code review comments
- a92e8e8 Merge branch 'master' into 7.5
- d9a4bc4 Merge pull request #13793 from Automattic/vkarpov15/gh-13774
- 29de9c4 Merge pull request #13786 from Automattic/vkarpov15/handle-top-level-dollar-keys
- 84e79b9 Merge pull request #13787 from Automattic/vkarpov15/gh-13780
- a9db5ea types: handle Schema.Types.BigInt in schema definition re: #13780
- 90fc4d2 Merge pull request #13792 from mreouven/patch-1
- 41e63bd fix(document): avoid double-calling array getters when using `.get('arr.0')`
- c1d5b76 Merge pull request #13774 from Automattic/vkarpov15/gh-13748
- 0d956ce test: fix tests
- f44e169 Update pipelinestage.d.ts
- 9f1c24c Update pipelinestage.d.ts
- 7ec92a7 types(schematypes): add missing BigInt SchemaType
- fe7f80b test: add tests
- 40146c8 feat: allow top level dollar keys with findOneAndUpdate(), update()
- fafa5d5 Merge branch 'master' into 7.5
- e36fc48 docs: fix link
- 65245a4 style: fix lint
- 069651e Merge branch 'master' into 7.5
- 6eeb875 Merge branch 'master' into vkarpov15/gh-13748
- e12ae3f chore: release 7.4.5
- 13c2ad0 fix(model): fix merge issue
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 
🧐 View latest project report
Learn how to fix vulnerabilities with free interactive lessons: