CVE-2019-17426 - medium detected in mongoose

[github-actions]

Package Name: mongoose
Package Version: ['4.2.4']
Package Manager: npm
Target File: package.json
Severity Level: medium
Snyk ID: SNYK-JS-MONGOOSE-472486
Snyk CVE: CVE-2019-17426
Snyk CWE: CWE-200
Link to issue in Snyk: https://app.snyk.io/org/rhicksiii91/project/93ddcac2-4d2c-43e7-b383-b47b30846d11

Snyk Description: ## Overview
mongoose is a Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment.

Affected versions of this package are vulnerable to Information Exposure. Any query object with a _bsontype attribute is ignored, allowing attackers to bypass access control.

Remediation

Upgrade mongoose to version 4.13.21, 5.7.5 or higher.

References

• GitHub Commit
• GitHub Issue

[github-actions]

auto-closed by snyk_scm_issues_to_gh_issues
reason: snyk project no longer exists