Vulnerability in cookie exposed via express

[oskarwilliams]

I decided to remove the default styling of issue as it didn't feel appropriate. If anyone would like I am happy to add back in!

There is a vulnerability CVE-2024-47764 in cookie < 0.7.0. This package is present in express v4.21.0 which is the version inside the shrinkwrap. Could we bump the version of express in the shrinkwrap to v4.21.1 (this is acceptable to the package.json)?

I am making a PR to do this now if that helps speed through the process.