Update server-express to express v4.20.0 or greater

[rmtuckerphx]

I'm submitting a...

• Bug report
• Feature request
• Documentation issue or request
• Other... Please describe: CVE

Expected Behavior

Resolve the CVEs by upgrading express to v4.20.0 (or greater) which will update:

• body-parser to v1.20.3
• path-to-regexp to v0.1.10

Current Behavior

CVE-2024-45590
body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in 1.20.3.

CVE-2024-45296
path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0.

Error Log

None

Your Environment

• Jovo Framework version used: 4.6.2
• Operating System: Windows 11 Pro