CERBERUS/LibreChat
1
0
Fork 0
mirror of https://github.com/danny-avila/LibreChat.git synced 2026-08-04 14:57:42 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 6

🍃 chore: Bump Mongoose to 8.24.1 to Patch Prototype Pollution (#14461)

Browse source 
Closes GHSA-664h-wqgq-64gw (CVSS 6.5, CWE-1321), a prototype pollution
in update casting via a __proto__-prefixed dotted path. Affected range
is >=8.0.0 <8.24.1, so 8.23.1 was flagged by npm audit.
This commit is contained in:
Danny Avila 2026-07-27 12:40:14 -04:00 • committed by GitHub
parent a53936d273
commit 531fecc82b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
4 changed files with 9 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

2
api/package.json
View file

@ -102,7 +102,7 @@
"mime": "^3.0.0",
"module-alias": "^2.2.3",
"mongodb": "^6.14.2",
"mongoose": "^8.23.1",
"mongoose": "^8.24.1",
"multer": "^2.2.0",
"nanoid": "^3.3.7",
"node-fetch": "^2.7.0",

12
package-lock.json generated
View file

@ -117,7 +117,7 @@
"mime": "^3.0.0",
"module-alias": "^2.2.3",
"mongodb": "^6.14.2",
"mongoose": "^8.23.1",
"mongoose": "^8.24.1",
"multer": "^2.2.0",
"nanoid": "^3.3.7",
"node-fetch": "^2.7.0",
@ -33704,9 +33704,9 @@
}
},
"node_modules/mongoose": {
"version": "8.23.1",
"resolved": "https://registry.npmjs.org/mongoose/-/mongoose-8.23.1.tgz",
"integrity": "sha512-gHSPD8qEwRmiXapK17hEnFWZdcFENMegHTcw5XIIg2+7R8eXQvdwSiMpD/A2oG8tKzFLLHyRXd8/eaDPAVwZgQ==",
"version": "8.24.1",
"resolved": "https://registry.npmjs.org/mongoose/-/mongoose-8.24.1.tgz",
"integrity": "sha512-UpHBA0l5kHyKJQFjmBaFYQFo5sgz1DK0TRqDkOyBLYbqiIbKKhIvBpHWBXqeo0rgW4kGI1UhhAw+kTQZoj1BdA==",
"license": "MIT",
"dependencies": {
"bson": "^6.10.4",
@ -43738,7 +43738,7 @@
"mathjs": "^15.2.0",
"memorystore": "^1.6.7",
"mongodb": "^6.14.2",
"mongoose": "^8.23.1",
"mongoose": "^8.24.1",
"nanoid": "^3.3.7",
"node-fetch": "2.7.0",
"pdfjs-dist": "^5.4.624",
@ -46124,7 +46124,7 @@
"librechat-data-provider": "*",
"lodash": "^4.17.23",
"meilisearch": "^0.38.0",
"mongoose": "^8.23.1",
"mongoose": "^8.24.1",
"nanoid": "^3.3.7",
"winston": "^3.17.0",
"winston-daily-rotate-file": "^5.0.0"

2
packages/api/package.json
View file

@ -155,7 +155,7 @@
"mathjs": "^15.2.0",
"memorystore": "^1.6.7",
"mongodb": "^6.14.2",
"mongoose": "^8.23.1",
"mongoose": "^8.24.1",
"nanoid": "^3.3.7",
"node-fetch": "2.7.0",
"pdfjs-dist": "^5.4.624",

2
packages/data-schemas/package.json
View file

@ -80,7 +80,7 @@
"librechat-data-provider": "*",
"lodash": "^4.17.23",
"meilisearch": "^0.38.0",
"mongoose": "^8.23.1",
"mongoose": "^8.24.1",
"nanoid": "^3.3.7",
"winston": "^3.17.0",
"winston-daily-rotate-file": "^5.0.0"