Merge pull request #986 from logto-io/simeng-audit-fix

fix: audit fix security issue

Author: simeng-li

package.json

@@ -40,7 +40,9 @@
       "micromatch@<4.0.8": "^4.0.8",
       "send@<0.19.0": "^0.19.0",
       "cookie@<0.7.0": "^0.7.0",
-      "path-to-regexp@<0.1.12": "^0.1.12"
+      "path-to-regexp@<0.1.12": "^0.1.12",
+      "form-data@>=4.0.0 <4.0.4": "^4.0.4",
+      "on-headers@<1.1.0": "^1.1.0"
     },
     "peerDependencyRules": {
       "allowedVersions": {