fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-BODYPARSER-7926860
- https://snyk.io/vuln/SNYK-JS-EXPRESS-7926867
- https://snyk.io/vuln/SNYK-JS-SEND-7926862
- https://snyk.io/vuln/SNYK-JS-SERVESTATIC-7926865

package.json

@@ -52,7 +52,7 @@
     "@google-cloud/storage": "^3.0.3",
     "ajv": "^6.4.0",
     "ajv-keywords": "^3.4.0",
-    "body-parser": "^1.18.2",
+    "body-parser": "^1.20.3",
     "bodybuilder": "2.2.21",
     "commander": "^5.1.0",
     "compression": "^1.7.2",
@@ -61,7 +61,7 @@
     "cross-env": "^7.0.2",
     "elasticdump": "^6.9.1",
     "email-check": "^1.1.0",
-    "express": "^4.16.3",
+    "express": "^4.20.0",
     "fs-extra": "^8.1.0",
     "graphql": "^0.13.1",
     "graphql-tools": "^1.2.1",
@@ -89,7 +89,7 @@
     "request-promise-native": "^1.0.5",
     "resource-router-middleware": "^0.6.0",
     "sharp": "^0.23.4",
-    "soap": "^0.25.0",
+    "soap": "^0.34.0",
     "storefront-query-builder": "https://github.com/vuestorefront/storefront-query-builder.git",
     "syswide-cas": "latest",
     "tsconfig-paths": "^3.9.0",