feat: upgrade cross-spawn

[jimcase]

Fix cross-spawn vulnerability version

Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string.
GHSA-3xgq-45jj-v275

[brandonfl]

Severity : High 7.5 / 10
EPSS score: 0.045% (17th percentile)
Weaknesses : https://github.com/advisories?query=cwe%3A1333
CVE ID : GHSA-3xgq-45jj-v275
GHSA ID : GHSA-3xgq-45jj-v275

Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string.

[lucaslokchan]

❯ docker scout cves snipe:test
✓ SBOM of image already cached, 476 packages indexed
✗ Detected 1 vulnerable package with 1 vulnerability

0C 1H 0M 0L cross-spawn 7.0.3
pkg:npm/cross-spawn@7.0.3

✗ HIGH CVE-2024-21538 [Inefficient Regular Expression Complexity]
  https://scout.docker.com/v/CVE-2024-21538?s=github&n=cross-spawn&t=npm&vr=%3E%3D7.0.0%2C%3C7.0.5
  Affected range : >=7.0.0
                 : <7.0.5
  Fixed version  : 7.0.5
  CVSS Score     : 7.5
  CVSS Vector    : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

The image contains 1 packages with one or more vulnerability for a total of 1 vulnerabilities
LOW | 0
MEDIUM | 0
HIGH | 1
CRITICAL | 0