Skip to content

Commit

Permalink
fix: upgrade to mpath v0.8.4 re: security issue
Browse files Browse the repository at this point in the history
Note that the security issue in earlier versions of mpath does **not** affect Mongoose

Fix #10683
  • Loading branch information
vkarpov15 committed Sep 6, 2021
1 parent fc5fc7e commit 264554f
Show file tree
Hide file tree
Showing 2 changed files with 1 addition and 3 deletions.
2 changes: 0 additions & 2 deletions lib/document.js
Expand Up @@ -1368,8 +1368,6 @@ Document.prototype.$set = function $set(path, val, type, options) {
this.unmarkModified(path);
}
}
} else {
console.log('No shouldSet', path);
}

if (schema.$isSingleNested && (this.isDirectModified(path) || val == null)) {
Expand Down
2 changes: 1 addition & 1 deletion package.json
Expand Up @@ -25,7 +25,7 @@
"kareem": "2.3.2",
"mongodb": "3.6.11",
"mongoose-legacy-pluralize": "1.0.2",
"mpath": "0.8.3",
"mpath": "0.8.4",
"mquery": "3.2.5",
"ms": "2.1.2",
"optional-require": "1.0.x",
Expand Down

0 comments on commit 264554f

Please sign in to comment.