[Component Governance Alert][GradleV2,3] Fix CVE-2022-24999

[vmapetr]

Task name:

• GradleV2
• GradleV3

Description:
This PR fixes CVE-2022-24999 in the qs package by removing the vulnerable Request dependency and updating codeanalysis-common package.

The Request package is deleted because it is a loose dependency. According to request/request#3142 it was deprecated and got no security updates since 2020.

The codeanalysis-common package is updated to the recent version that doesn't use the vulnerable request package.

Vulnerability Description:
qs before 6.10.3 allows attackers to cause a Node process to hang because an __ proto__ key can be used. In many typical web framework use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used to visit the application, such as a[proto]=b&a[proto]&a[length]=100000000. The fix was backported to qs 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, and 6.2.4.

Documentation changes required: N

Added unit tests: N

Checklist:

• Task version was bumped - please check instruction how to do it
• Checked that applied changes work as expected

[vmapetr]

How it was tested:

• Built & unit tested on the local machine
• Built & unit tested in CI