fix: package.json & yarn.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-PATHTOREGEXP-8482416

package.json

@@ -62,7 +62,7 @@
     "@types/underscore": "^1.8.9",
     "amqplib": "0.5.3",
     "apollo-datasource-rest": "^0.5.1",
-    "apollo-server-express": "^2.9.7",
+    "apollo-server-express": "^3.13.0",
     "aws-sdk": "^2.151.0",
     "bcryptjs": "^2.4.3",
     "cookie": "^0.4.1",
@@ -76,7 +76,7 @@
     "erxes-inmemory-storage": "^1.0.16",
     "erxes-message-broker": "^1.0.17",
     "erxes-telemetry": "^1.0.4",
-    "express": "^4.17.1",
+    "express": "^4.21.2",
     "faker": "^4.1.0",
     "file-type": "^10.4.0",
     "firebase-admin": "^8.6.1",