fix: package.json & package-lock.json to reduce vulnerabilities (#6378)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-BODYPARSER-7926860
- https://snyk.io/vuln/SNYK-JS-EXPRESS-7926867
- https://snyk.io/vuln/SNYK-JS-SEND-7926862
- https://snyk.io/vuln/SNYK-JS-SERVESTATIC-7926865

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

package.json

@@ -39,11 +39,11 @@
   "dependencies": {
     "@yetzt/nedb": "1.8.0",
     "archiver": "7.0.0",
-    "body-parser": "1.20.2",
+    "body-parser": "1.20.3",
     "cbor": "5.2.0",
     "compression": "1.7.4",
     "cookie-session": "2.0.0",
-    "express": "4.19.2",
+    "express": "4.21.0",
     "express-handlebars": "5.3.5",
     "express-ws": "5.0.2",
     "ipcheck": "0.1.0",