mongoose
9.11.4 · 23 Oct 2026MIT5.8M / weekRepositoryHomepagenpmAtom feed
Upgrading mongoose from 4.4.1 to 4.13.21
121 releases in betweennotes for 0
- ?
- changes to make
- 1
- advisory fixed
- ?
- new
- ?
- fixes
Counted from 0 of 121 release notes. Advisories are counted from the advisory database, in full.
Security
7 advisories still affect 4.13.21
- Mongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)moderate · GHSA-664h-wqgq-64gw
- Mongoose Prototype Pollution vulnerabilitycritical · GHSA-9m93-w8w6-76hh
- automattic/mongoose vulnerable to Prototype pollution via Schema.pathhigh · GHSA-f825-f98c-gj3g
Upgrading to 6.13.10 clears them.
Fixes 1 advisory affecting 4.4.1
- Improper Input Validation in Automattic Mongoosecritical · GHSA-8687-vv9j-hgph