fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AXIOS-15252993
- https://snyk.io/vuln/SNYK-JS-QS-15268416

package.json

@@ -24,15 +24,15 @@
     "@sendgrid/mail": "^8.1.3",
     "app-root-path": "^3.0.0",
     "autoprefixer": "^10.3.4",
-    "axios": "^1.6.8",
+    "axios": "^1.13.5",
     "cookie-parser": "^1.4.5",
-    "express": "^4.17.1",
+    "express": "^4.22.0",
     "express-rate-limit": "^5.2.6",
     "hcaptcha": "^0.0.2",
     "helmet": "^4.6.0",
     "http-errors": "^1.8.0",
     "morgan": "^1.10.0",
-    "nodemailer": "^7.0.7",
+    "nodemailer": "^6.6.1",
     "npm-watch": "^0.11.0",
     "postcss-cli": "^8.3.1",
     "pug": "^3.0.2",