fix: update cookie dependency to ^0.7.0 to address CVE-2024-47764

Updates the cookie package from ^0.5.0 to ^0.7.0 to fix a critical security vulnerability (CVE-2024-47764) that allows malicious cookie values to inject unexpected key-value pairs into JavaScript objects.

The vulnerability could allow attackers to inject special properties like __proto__, constructor, or prototype through malicious cookie values.

Cookie 0.7.0 includes proper validation to prevent these injection attacks while maintaining backward compatibility.

Author: keith-oak

package-lock.json

@@ -39,7 +39,7 @@
     "cli-progress": "^3.12.0",
     "commander": "^9.5.0",
     "concurrently": "^7.6.0",
-    "cookie": "^0.5.0",
+    "cookie": "^0.7.0",
     "devcert": "^1.2.0",
     "dotenv": "^16.4.5",
     "finalhandler": "^1.2.0",