Fix vulnerability issue in commons-beanutils to address CVE-2025-48734

[ShahimSharafudeen]

Description

Fix the vulnerability issue in commons-beanutils to address CVE-2025-48734

To fix this issue, the commons-beanutils dependency was upgraded from version 1.9.4 to 1.11.0.

Motivation and Context

These dependency upgrade was implemented to mitigate CVEs present in previous version.

Impact

Test Plan

Contributor checklist

• Please make sure your submission complies with our contributing guide, in particular code style and commit standards.
• PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced.
• Documented new properties (with its default value), SQL syntax, functions, or other functionality.
• If release notes are required, they follow the release notes guidelines.
• Adequate tests were added if applicable.
• CI passed.

Release Notes

Please follow release notes guidelines and fill in the release notes below.

== RELEASE NOTES ==

Security Changes
* Upgrade commons-beanutils dependency to address 'CVE-2025-48734  <https://github.com/advisories/GHSA-wxr5-93ph-8wr9>'

[ZacBlanco]

Please update the release note section to Security Changes

[ZacBlanco]

Does beanutils use commons-logging? Can we also look into updating tempto in that case too?

[ZacBlanco]

Also, rather than exclude, can we pull up the dependency here?

[ShahimSharafudeen]

Yes. commons-validator and commons-beanutils use different versions of commons-logging, so it was updated to the higher version to avoid conflicts