fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-XSS-1584355
- https://snyk.io/vuln/SNYK-JS-FINDMYWAY-8055229
- https://snyk.io/vuln/SNYK-JS-COOKIE-8163060
- https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073

Author: snyk-bot