Security issues from dependencies

[Josh Taylor]

Found using nsp.

[Dustin Smith]

Are we able to easily upgrade these? Feel free to submit a patch and we will review. Otherwise it might not get address for a bit.