[release-1.22] fix: CVE-2024-35255

[andyzhangx]

What type of PR is this? /kind bug

What this PR does / why we need it: fix: CVE-2024-35255

cherrypick of https://github.com/kubernetes-sigs/blob-csi-driver/pull/1420

Which issue(s) this PR fixes:

Fixes #

Requirements:

• [ ] uses conventional commit messages
• [ ] includes documentation
• [ ] adds unit tests
• [ ] tested upgrade from previous version

Special notes for your reviewer:

Release note:

none

[andyzhangx]

/retest

[andyzhangx]

/retest

[andyzhangx]

/retest

[andyzhangx]

/retest

[andyzhangx]

/retest

[andyzhangx]

/retest

[andyzhangx]

/retest

[andyzhangx]

/retest

[andyzhangx]

/retest