npm audit: cookie  <0.7.0

```
cookie accepts cookie name, path, and domain with out of bounds characters - https://github.com/advisories/GHSA-pxg6-pf52-xh8x
No fix available
node_modules/ncsrf/node_modules/cookie
  ncsrf  *
  Depends on vulnerable versions of cookie
  node_modules/ncsrf
```

Could the dependencies be updated and a new release published?