[Snyk] Upgrade ddp from 0.11.0 to 0.12.1

[snyk-bot]

Snyk has created this PR to upgrade ddp from 0.11.0 to 0.12.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 5 years ago, on 2016-09-15.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Override Protection Bypass npm:qs:20170213	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Remote Memory Exposure npm:request:20160119	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Timing Attack npm:http-signature:20150122	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:hawk:20160119	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: ddp

• 0.12.1 - 2016-09-15
  No content.
• 0.12.0 - 2016-04-01
  

  0.12.0 — 2016-03-31

  • Update npm dependencies, including faye-websocket (#78)
  • Catch JSON parsing exceptions (#77)
  • Fix adding changed handler on observer creator (#72)
• 0.11.0 - 2015-03-24

from ddp GitHub release notes

Commit messages

Package name: ddp

• 2a1e95b Reference Resolved Issue
• 51fe50d Prepare for v0.12.1 release
• 7e61509 Merge pull request Bump @types/node from 14.17.4 to 16.7.13 in /ee/server/services #88 from mark-bradshaw/master
• 823682f Update request due to security vulnerability
• b5a6932 Update README
• d221554 Prepare for 0.12.0 release.
• 6a37c0e Merge pull request Bump ts-node from 10.0.0 to 10.2.1 in /ee/server/services #72 from rclai/patch-1
• 3f51599 Merge pull request Bump @types/node from 14.17.4 to 16.7.1 in /ee/server/services #73 from cfnelson/master
• 38e97b8 Merge pull request [Snyk] Security upgrade object-path from 0.11.5 to 0.11.6 #78 from mayvn10/master
• 60e2540 0.11.0
• 3c3a80e 0.11.0 faye dependency
• 01298a3 Added try/catch for uncaught JSON parse error.
• 5fe08ff Fix adding changed handler on observer creator

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs