Address CVE-2023-44487 https://github.com/advisories/GHSA-qppj-fm5r-hxr3 Signed-off-by: Benjamin Wang <wachao@vmware.com>