fix: plugins/todo-backend/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908
- https://snyk.io/vuln/SNYK-JS-ASYNC-2441827

plugins/todo-backend/package.json

@@ -34,8 +34,8 @@
     "cross-fetch": "^3.0.6",
     "express": "^4.17.1",
     "express-promise-router": "^4.1.0",
-    "leasot": "^12.0.0",
-    "winston": "^3.2.1",
+    "leasot": "^13.1.0",
+    "winston": "^3.3.4",
     "yn": "^4.0.0"
   },
   "devDependencies": {