[1.3] Backport CVE fixes to 1.3 branch (#2152)

Signed-off-by: Craig Perkins <[email protected]>

Author: cwperks

package.json

@@ -27,7 +27,12 @@
     "**/loader-utils": "^2.0.4",
     "decode-uri-component": "^0.2.1",
     "debug": "^4.3.4",
-    "browserify-sign": "^4.2.2"
+    "ejs": "^3.1.10",
+    "browserify-sign": "^4.2.2",
+    "express": "^4.21.1",
+    "braces": "^3.0.3",
+    "body-parser": "^1.20.3",
+    "micromatch": "^4.0.8"
   },
   "devDependencies": {
     "@elastic/eslint-import-resolver-kibana": "link:../../packages/osd-eslint-import-resolver-opensearch-dashboards",