chore: security fix https://nvd.nist.gov/vuln/detail/CVE-2023-46402

[arylatt]

Cherry-picking high severity vulnerability fix (#4083) to release-1.8 branch.

---

Checklist:

• Either (a) I've created an enhancement proposal and discussed it with the community, (b) this is a bug fix, or (c) this is a chore.
• The title of the PR is (a) conventional with a list of types and scopes found here, (b) states what changed, and (c) suffixes the related issues number. E.g. "fix(controller): Updates such and such. Fixes #1234".
• I've signed my commits with DCO
• I have written unit and/or e2e tests for my change. PRs without these are unlikely to be merged.
• My builds are green. Try syncing with master if they are not.
• My organization is added to USERS.md.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Published E2E Test Results

  4 files    4 suites   3h 16m 55s ⏱️
115 tests 106 ✅  7 💤 2 ❌
466 runs  432 ✅ 28 💤 6 ❌

For more details on these failures, see this check.

Results for commit 10d7f91.

[github-actions]

Published Unit Test Results

2 328 tests   2 328 ✅  3m 0s ⏱️
  128 suites      0 💤
    1 files        0 ❌

Results for commit 10d7f91.