[Snyk] Upgrade mongoose from 5.9.26 to 5.9.28

[snyk-bot]

Snyk has created this PR to upgrade mongoose from 5.9.26 to 5.9.28.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2020-08-07.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Remote Memory Exposure SNYK-JS-BL-608877	456/1000 Why? Recently disclosed, CVSS 7.7	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mongoose

• 5.9.28 - 2020-08-07
  

  chore: release 5.9.28

• 5.9.27 - 2020-07-31
  

  chore: release 5.9.27

• 5.9.26 - 2020-07-27
  

  chore: release 5.9.26

from mongoose GitHub release notes

Commit messages

Package name: mongoose

• c95c7de chore: release 5.9.28
• 7415dce fix(connection): consistently stop buffering when "reconnected" is emitted
• 7a47529 fix(error): ensure `name` and `message` show up on individual ValidatorErrors when calling JSON.stringify() on a ValidationError
• 0b89e87 test(error): repro #9296
• 91552fb fix(document): allow saving after setting document array to itself
• b878ba9 test(document): repro #9266
• 816d75b fix(document): keepsmanually populated paths when setting a nested path to itself
• 2b2b3c5 test(document): repro #9293
• db545ff chore: update opencollective sponsors
• 6f6f441 fix(schema): handle `match` schema validator with `/g` flag
• 4d8ecac test(schema): repro #9287
• 1caa714 docs: correct filepath to transactions tests
• 5953a67 chore: release 5.9.27
• e707bf0 Merge pull request #9297 from AbdelrahmanHafez/patch-7
• 57b1bc6 bump mongodb driver to 3.5.10
• f8ae13d docs(transactions): make transactions docs use async/await for readability
• dcccbcc chore: add changelog to npmignore

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs