dependencies security vulnerability

- [ ] I have searched the [issues](https://github.com/seata/seata/issues) of this repository and believe that this is not a duplicate.

### Ⅰ. Issue Description

dependencies security vulnerability


### Ⅱ. Describe what happened

If there is an exception, please attach the exception trace:

```
Just paste your stack trace here!
```

### Ⅲ. Describe what you expected to happen

### Ⅳ. How to reproduce it (as minimally and precisely as possible)

1. xxx
2. xxx
3. xxx

Minimal yet complete reproducer code (or URL to code):

### Ⅴ. Anything else we need to know?

### Ⅵ. Environment:

- JDK version(e.g. `java -version`):
- Seata client/server version:
- Database version:
- OS(e.g. `uname -a`):
- Others:

Start by reading the repository security policy linked in the issue and reviewing the attached vulnerability screenshots. Identify the affected dependencies and versions from that evidence, then confirm the required remediation and verify that the dependency vulnerability is resolved; the issue provides no file, test, or reproducer to start from.

Written by the indexing model from the issue text.