Bump production dependencies with open CVEs

package.json

@@ -84,7 +84,7 @@
     "copy-to-clipboard": "^3.0.6",
     "css-loader": "^0.28.7",
     "date-fns": "1.29.0",
-    "debug": "2.6.9",
+    "debug": "^4.1.1",
     "dotenv": "^4.0.0",
     "emoji-regex": "^6.5.1",
     "exports-loader": "^0.6.4",
@@ -101,7 +101,7 @@
     "isomorphic-fetch": "2.2.1",
     "js-search": "^1.4.2",
     "json-loader": "0.5.4",
-    "jsonwebtoken": "7.0.1",
+    "jsonwebtoken": "^8.5.0",
     "jszip": "3.1.5",
     "koa": "^2.2.0",
     "koa-bodyparser": "4.2.0",
@@ -117,7 +117,7 @@
     "koa-sendfile": "2.0.0",
     "koa-sslify": "2.1.2",
     "koa-static": "^4.0.1",
-    "lodash": "^4.17.4",
+    "lodash": "^4.17.11",
     "mobx": "4.6.0",
     "mobx-react": "^5.4.2",
     "natural-sort": "^1.0.0",