Merge pull request #1774 from telefonicaid/dependabot/npm_and_yarn/mongoose-8.22.1

AlvaroVega · web-flow · commit fd3dbef2e1cc · 2026-05-11T13:01:39.000+02:00
Bump mongoose from 8.9.5 to 8.22.1
diff --git a/CHANGES_NEXT_RELEASE b/CHANGES_NEXT_RELEASE
@@ -1 +1,2 @@
 - Upgrade uuid dep from 8.3.2 to 14.0.0 due to CWE-787 CWE-1285
+- Upgrade mongoose from 8.9.5 to 8.22.1 due to CWE-74 CVE-2026-42334
diff --git a/package.json b/package.json
@@ -52,7 +52,7 @@
     "logops": "2.1.2",
     "moment": "~2.29.2",
     "moment-timezone": "~0.5.34",
-    "mongoose": "8.9.5",
+    "mongoose": "8.22.1",
     "query-string": "7.1.1",
     "revalidator": "~0.3.1",
     "underscore": "~1.13.4",

Original file line number	Diff line number	Diff line change
`@@ -1 +1,2 @@`
`1`	`1`	`- Upgrade uuid dep from 8.3.2 to 14.0.0 due to CWE-787 CWE-1285`
	`2`	`+- Upgrade mongoose from 8.9.5 to 8.22.1 due to CWE-74 CVE-2026-42334`