mongoose
9.11.4 · 23 Oct 2026MIT5.8M / weekRepositoryHomepagenpmAtom feed
Your version
9.4.0
3 Apr 20269.11.4 is the newest release of 9.x.
Security
1 advisory affects 9.4.0; 9.7.2 fixes them
- ModerateMongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)GHSA-664h-wqgq-64gw · 24 Jul 2026Fixed in 9.7.2
Release note
No note was found for 9.4.0 on GitHub or in the repository's changelog.