Suppress Hadoop and jose4j cve

[kfaraz]

Changes

• Suppress CVE-2023-36478 as there is no newer Hadoop version available that addresses this
• Suppress CVE-2023-31582 in jose4j. Pulled in by Kubernetes/Kafka but not addressed yet.

[kfaraz]

Thanks for the review, @abhishekagarwal87 ! There seem to be a few more CVEs coming from druid-ranger-security but these are already being addressed in #15407

[ERROR] Failed to execute goal org.owasp:dependency-check-maven:7.4.4:check (default-cli) on project druid-ranger-security: 
[ERROR] 
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0': 
[ERROR] 
[ERROR] aggs-matrix-stats-client-7.10.2.jar: CVE-2023-31419(7.5), CVE-2023-31417(7.5), CVE-2023-31418(7.5)
[ERROR] aws-java-sdk-bundle-1.12.125.jar/META-INF/maven/com.fasterxml.jackson.core/jackson-databind/pom.xml: CVE-2021-46877(7.5), CVE-2020-36518(7.5)
[ERROR] aws-java-sdk-bundle-1.12.125.jar/META-INF/maven/io.netty/netty-codec/pom.xml: CVE-2022-41881(7.5)
[ERROR] aws-java-sdk-bundle-1.12.125.jar/META-INF/maven/io.netty/netty-transport/pom.xml: CVE-2022-41881(7.5)
[ERROR] elasticsearch-core-7.10.2.jar: CVE-2023-31419(7.5), CVE-2023-31417(7.5), CVE-2023-31418(7.5)
[ERROR] kafka-clients-2.8.1.jar: CVE-2023-25194(8.8)
[ERROR] lang-mustache-client-7.10.2.jar: CVE-2023-31419(7.5), CVE-2023-31417(7.5), CVE-2023-31418(7.5)
[ERROR] mapper-extras-client-7.10.2.jar: CVE-2023-31419(7.5), CVE-2023-31417(7.5), CVE-2023-31418(7.5)
[ERROR] parent-join-client-7.10.2.jar: CVE-2023-31419(7.5), CVE-2023-31417(7.5), CVE-2023-31418(7.5)
[ERROR] rank-eval-client-7.10.2.jar: CVE-2023-31419(7.5), CVE-2023-31417(7.5), CVE-2023-31418(7.5)
[ERROR] spatial4j-0.7.jar: CVE-2014-125074(9.8)
[ERROR] woodstox-core-6.2.4.jar/META-INF/maven/com.sun.xml.bind.jaxb/isorelax/pom.xml: CVE-2023-34411(7.5)