fix: package.json & yarn.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-PATHTOREGEXP-7925106

package.json

@@ -19,7 +19,7 @@
     "chart.js": "3.9.1",
     "connect-history-api-fallback": "2.0.0",
     "dotenv": "^16.0.1",
-    "express": "4.18.1",
+    "express": "4.20.0",
     "vue": "3.2.37",
     "vue-router": "4.1.3",
     "vuex": "4.0.2"