Raise dependency minimums to exclude versions with known CVEs

Gábor Hojtsyrequested to merge
issue/drupal-3626470:3626470-cves-update-11 into 11.x

Closes #3626470

Merge request reports