9.11.4 / 2026-10-23
- fix: avoid walking into inherited properties like
toStringwhen hydrating documents, setting dotted paths, and merging updates - fix: only use own properties when looking up discriminators by key
- fix(schema): disallow setting special properties via virtual()
- fix(query): respect connection-level sanitizeFilter in queries
- fix(query): disallow special properties like
__proto__as paths in where() and mod() - fix(deps): upgrade mquery -> 6.0.1 to avoid prototype pollution with query helpers like gt() and in()