Adding CVE patch for package kubeflow-pipelines-visualization-server to fix CVE: GHSA-8w49-h785-mj3c

<!--ci-cve-scan:must-fix: GHSA-8w49-h785-mj3c-->

Author: octo-sts[bot]

kubeflow-pipelines-visualization-server.yaml

@@ -1,7 +1,7 @@
 package:
   name: kubeflow-pipelines-visualization-server
   version: 2.3.0
-  epoch: 100
+  epoch: 101 # GHSA-8w49-h785-mj3c
   description: Machine Learning Pipelines for Kubeflow
   copyright:
     - license: Apache-2.0
@@ -30,6 +30,10 @@ pipeline:
       tag: ${{package.version}}
       expected-commit: 4467df5f9c8242d389f20214f75fecfc4119e8cd
 
+  - uses: patch
+    with:
+      patches: GHSA-8w49-h785-mj3c.patch
+
   - uses: patch
     with:
       patches: 0001-Bump-dependencies.patch

kubeflow-pipelines-visualization-server/GHSA-8w49-h785-mj3c.patch

@@ -0,0 +1,5 @@
+--- a/backend/src/apiserver/visualization/requirements.txt
++++ b/backend/src/apiserver/visualization/requirements.txt
+@@ -517 +517 @@
+-tornado==6.3.3
++tornado==6.4.2