fix: tomcat and security cve

provider/gcz-transformer-aws/pom.xml

@@ -119,6 +119,7 @@
         <dependency>
             <groupId>org.apache.tomcat.embed</groupId>
             <artifactId>tomcat-embed-core</artifactId>
+            <version>10.1.35</version>
         </dependency>
 
         <dependency>
@@ -139,6 +140,11 @@
             <version>2.5.2</version>
         </dependency>
 
+        <dependency>
+            <groupId>org.springframework.security</groupId>
+            <artifactId>spring-security-crypto</artifactId>
+            <version>6.3.8</version>
+        </dependency>
 
 
     </dependencies>