[Security] Fix low severity security vulnerabilities

[billhimmelsbach]

• after this issue is completed and deployed, then we should move onto low and moderate security vulnerabilities using dependabot as a guide