From 97a409cf908ff9d93795b264a0a5fe8e8797e3e3 Mon Sep 17 00:00:00 2001
From: "cycode-security[bot]"
 <54410473+cycode-security[bot]@users.noreply.github.com>
Date: Tue, 6 Oct 2026 07:24:33 +0000
Subject: [PATCH] [Cycode] Fix for vulnerable manifest file dependency -
 @opentelemetry/instrumentation-mongoose updated to version 0.67.0

---
 nodejs/packages/layer/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nodejs/packages/layer/package.json b/nodejs/packages/layer/package.json
index d405976e3d..3c66e4c430 100644
--- a/nodejs/packages/layer/package.json
+++ b/nodejs/packages/layer/package.json
@@ -64,7 +64,7 @@
     "@opentelemetry/instrumentation-koa": "^0.51.0",
     "@opentelemetry/instrumentation-memcached": "^0.47.0",
     "@opentelemetry/instrumentation-mongodb": "^0.56.0",
-    "@opentelemetry/instrumentation-mongoose": "^0.50.0",
+    "@opentelemetry/instrumentation-mongoose": "^0.67.0",
     "@opentelemetry/instrumentation-mysql": "^0.49.0",
     "@opentelemetry/instrumentation-mysql2": "^0.49.0",
     "@opentelemetry/instrumentation-nestjs-core": "^0.49.0",