[CVE-2023] fix multiple CVE issues

[ansjcy]

Is your feature request related to a problem? Please provide an existing Issue # , or describe. A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you are proposing A clear and concise description of what you want to happen.

Describe alternatives you've considered A clear and concise description of any alternative solutions or features you've considered.

Additional context Add any other context or screenshots about the feature request here.

Check List

• [ ] New functionality includes testing.
  • [ ] All tests pass
• [ ] New functionality has been documented.
  • [ ] New functionality has javadoc added
• [ ] Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license. For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[codecov[bot]]

Codecov Report

Merging #519 (64d5461) into 1.3 (d28290a) will not change coverage. The diff coverage is n/a.

:exclamation: Current head 64d5461 differs from pull request most recent head 050cb84. Consider uploading reports for the commit 050cb84 to get more accurate results

@@            Coverage Diff            @@
##                1.3     #519   +/-   ##
=========================================
  Coverage     72.21%   72.21%           
  Complexity      357      357           
=========================================
  Files            44       44           
  Lines          2519     2519           
  Branches        169      169           
=========================================
  Hits           1819     1819           
  Misses          594      594           
  Partials        106      106