mongoose
9.11.4 · 23 Oct 2026MIT5.8M / weekRepositoryHomepagenpmAtom feed
Your version
6.13.9
4 Feb 20266.13.12 is the newest release of 6.x.
Security
Fixes 1 advisory that affected 6.13.8
- HighMongoose's Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL InjectionGHSA-wpg9-53fq-2r8h · 5 May 2026Fixed in 6.13.9
1 advisory affects 6.13.9; 6.13.10 fixes them
- ModerateMongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)GHSA-664h-wqgq-64gw · 24 Jul 2026Fixed in 6.13.10
Release note
No note was found for 6.13.9 on GitHub or in the repository's changelog.