[Security] Fix prioritized security vulnerabilities

[billhimmelsbach]

• after this PR is merged to fix storybook vulnerabilities, we should fix the prioritized security vulnerabilities using dependabot as a guide