Fix critical security issues based on GitHub's Vulnerability alerts

## Environment

- Version:
  

  ```
  cli version: 0.9.1
  core version: 0.9.1
  build version: 0.9.1
  serve version: 0.9.1
  ```

## What's wrong?

## What's the correct behavior?

## Reproducing steps