[Bug] Alluxio version has a vulnerability CVE-2023-38889

### Search before asking

- [X] I searched in the [issues](https://github.com/apache/pulsar/issues) and found nothing similar.

### Version

For pulsar version: `3.1.2` on branch: `branch-3.1` facing critical vulnerability [CVE-2023-38889](https://github.com/advisories/GHSA-xrrh-h86w-pwfj) related to packages:

- org.alluxio:alluxio-parent
- org.alluxio:alluxio-core-client-fs

Below is the versions available in pulsar -
- 2.7.3

Maven Dependency

- pulsar - org.apache.pulsar 3.1.2

### Minimal reproduce step

Run Pulsar CI workflow on pulsar branch - `branch-3.1`

### What did you expect to see?

Expected to pass the `OWASP dependency check` under `Pulsar CI` workflow.

### What did you see instead?

Vulnerability
```
Error: Failed to execute goal org.owasp:dependency-check-maven:8.2.1:aggregate (default) on project pulsar:
Error:
Error: One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
Error:
Error: alluxio-core-common-2.7.3.jar: CVE-2023-38889(9.8)
```

### Anything else?

_No response_

### Are you willing to submit a PR?

- [ ] I'm willing to submit a PR!

Locate the property and the Pulsar CI workflow on branch-3.1, then inspect how the OWASP dependency check reports org.alluxio dependencies. Update the dependency version as needed to remove CVE-2023-38889 and run the Pulsar CI workflow to confirm the OWASP dependency check passes.

Written by the indexing model from the issue text.