fix: Upgrade flask-cors to 6.x to resolve CVEs

Addresses CVE-2024-6839, CVE-2024-6844, and CVE-2024-6866 which
were failing the Trivy security scan.

Author: johngrimes

fhirpath-lab-api/pyproject.toml

@@ -11,7 +11,7 @@ description = "A FHIRPath Lab server backed by the Pathling FHIRPath engine"
 requires-python = ">=3.9"
 dependencies = [
     "flask>=3.1,<4",
-    "flask-cors>=5.0,<6",
+    "flask-cors>=6.0,<7",
     "pathling>=9.3.1,<10",
 ]