maven›com.intuit.karate/karate-core›GHSA-5x5q-8cgm-2hjq7.5 HIGHKarate has vulnerable dependency on json-smart package (CVE-2023-1370)The CVE