Provides transitive vulnerable dependency maven:org.apache.commons:commons-text:1.9

### Bug Type (问题类型)

rest-api (结果不合预期)

### Before submit

- [X] 我已经确认现有的 [Issues](https://github.com/apache/hugegraph/issues) 与 [FAQ](https://hugegraph.apache.org/docs/guides/faq/) 中没有相同 / 重复问题 (I have confirmed and searched that there are no similar problems in the historical issue and documents)

### Environment (环境信息)

版本1.0

### Expected & Actual behavior (期望与实际表现)

```

org.apache.hugegraph
hugegraph-client
1.0.0

```
这个版本提示
```
Provides transitive vulnerable dependency maven:org.apache.commons:commons-text:1.9
CVE-2022-42889 9.8 Improper Control of Generation of Code ('Code Injection') vulnerability
```

经过查询，是个洞

### Vertex/Edge example (问题点 / 边数据举例)

_No response_

### Schema [VertexLabel, EdgeLabel, IndexLabel] (元数据结构)

_No response_

Start by tracing the hugegraph-client Maven dependency configuration to find why org.apache.commons:commons-text:1.9 is brought in transitively. Confirm the dependency resolves to a version without CVE-2022-42889 and verify the Maven dependency or security scan no longer reports the vulnerable version.

Written by the indexing model from the issue text.