yarn mongoose 9.11.4

6 hours ago

9.11.4 / 2026-10-23

  • fix: avoid walking into inherited properties like toString when hydrating documents, setting dotted paths, and merging updates
  • fix: only use own properties when looking up discriminators by key
  • fix(schema): disallow setting special properties via virtual()
  • fix(query): respect connection-level sanitizeFilter in queries
  • fix(query): disallow special properties like __proto__ as paths in where() and mod()
  • fix(deps): upgrade mquery -> 6.0.1 to avoid prototype pollution with query helpers like gt() and in()

Don't miss a new mongoose release

NewReleases is sending notifications on new releases.