CVE-2023-3978, CVE-2023-45142: Vulnerabilities improvement

[JeffLuoo]

What would you like to be added:

Fix vulnerabilities issues.

Why is this needed:

/kind feature

[dgrisonnet]

/triage accepted

[ricardoapl]

I believe https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.1 is not affected by any of these

Should we close this issue?

By the way, I don't think metrics-server was affected by CVE-2023-3978

Perhaps we can use VEX in the future to communicate this to users instead

#1499