mongoose
9.11.4 · 23 Oct 2026MIT5.8M / weekRepositoryHomepagenpmAtom feed
Upgrading mongoose from 9.1.1 to 9.11.4
44 releases in betweennotes for 0
Other targets from 9.1.1Clears its 2 advisories9.7.2
- ?
- changes to make
- 2
- advisories fixed
- ?
- new
- ?
- fixes
Counted from 0 of 44 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 2 advisories affecting 9.1.1
- Mongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)moderate · GHSA-664h-wqgq-64gw
- Mongoose's Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injectionhigh · GHSA-wpg9-53fq-2r8h