chore(security): resolve dependency-related CVEs (#2423)