Skip to content

[🐸 Frogbot] Update version of mongoose to 5.13.20#7

Open
github-actions[bot] wants to merge 1 commit intomainfrom
frogbot-mongoose-294bbebbcf31c2b92da80d16ea2868e9
Open

[🐸 Frogbot] Update version of mongoose to 5.13.20#7
github-actions[bot] wants to merge 1 commit intomainfrom
frogbot-mongoose-294bbebbcf31c2b92da80d16ea2868e9

Conversation

@github-actions
Copy link

🚨 This automated pull request was created by Frogbot and fixes the below:

📦 Vulnerable Dependencies

✍️ Summary

SEVERITY CONTEXTUAL ANALYSIS DIRECT DEPENDENCIES IMPACTED DEPENDENCY FIXED VERSIONS CVES

Critical
Applicable mongoose:5.10.12 mongoose 5.10.12 [5.13.15]
[6.4.6]
CVE-2022-2564

🔬 Research Details

Description:
Prototype Pollution in GitHub repository automattic/mongoose prior to 6.4.6.


Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant