High java vulnerabilities that need to be patched

I recently ran a trivy scan and this tool showed up with having several fixable vulnerabilities

azure-function-core-tools version: `4.0.5455`

The trivy scan is providing me with the following list:

| package | installed | fixed | level |
| --------- | --------- | ----- | ----- |
| ch.qos.logback:logback-classic | 1.3.11 | 1.3.12, 1.4.12 | High |
| ch.qos.logback:logback-core | 1.3.11 | 1.3.12, 1.4.12 | High |
| io.netty:nettry-codec-http2 | 4.1.97.Final | 4.1.100.Final | High |

Having these vulnerabilities addressed would be greatly appreciated

Start by locating the dependency declarations used to build azure-function-core-tools version 4.0.5455, then reproduce the reported Trivy scan for logback-classic, logback-core, and Netty HTTP/2. Done means the dependencies use the listed fixed versions and the scan no longer reports these high vulnerabilities.

Written by the indexing model from the issue text.