Update Express to 4.21.2, path-to-regexp 0.1.12

[Visible-Radio]

Reproduction

Run npm list path-to-regexp with @remix-run/[email protected]

├─┬ @remix-run/[email protected]
│ └─┬ [email protected]
│   └── [email protected]

check out this CVE: https://nvd.nist.gov/vuln/detail/CVE-2024-52798

See the related issue in the express repo here:
expressjs/express#6216

Looks like express @4.21.2 addresses it
https://github.com/expressjs/express/releases/tag/4.21.2

System Info

N/A

Used Package Manager

npm

Expected Behavior

vulnerabilities in dependencies are addressed in a timely manner

Actual Behavior

Y'all are doing a great job - this is a new vulnerability. Our scanner is yelling at me.

[jamesRRL]

+1 for this

[timdorr]

The version isn't pinned to prevent this:

remix/packages/remix-dev/package.json

Line 50 in 3bb9e85

"express": "^4.20.0",

You can install the updated version yourself with npm update or npm update express