Bumped versions of vulnerable packages from npm

[daniel-mueller]

Hi,
I was just browsing through your repos and found outdated, vulnerable versions of npm packages. I thought I could just leave you a PR with bumped versions.

Cheers

[arcticicestudio]

Hi @daniel-mueller 👋, thanks for your contribution 👍
GitHub's new security features are absolutely fantastic for the open source community, but in most cases it's not necessary to update on each notification (weakly reports are send as email too) so that's why many of my repositories are not updated directly. There's an overview of currently affected CVE's on the “security” repository tab as well as regular notifications in the inbox of maintainers.

Both vulnerabilities are not critical for nord-docs since axios is not used with the maxContentLength option and lodash only affects server-side environments.

Anyway, every contribution is always welcome and even more so for Hacktoberfest 😄
I'll merge your PR before the next regular dependency update to prevent merge conflicts with the package-lock.json.

[svengreb]

I'll restore your PR later on since it was closed automatically because the develop branch has been deleted through #229.