Fix vulns

[FingalP]

There are a number of PRs made by Snyk which fix critical vulnerabilities, e.g. #25

Could someone merge these?

Thanks!