[CVE-2023] fix multiple cve issues

build.gradle

@@ -21,7 +21,7 @@ buildscript {
 
     dependencies {
         classpath "org.opensearch.gradle:build-tools:${opensearch_version}"
-        classpath group: 'com.google.guava', name: 'guava', version: '30.1-jre'
+        classpath group: 'com.google.guava', name: 'guava', version: '32.0.1-jre'
         classpath 'org.ajoberstar:gradle-git:0.2.3'
     }
 }
@@ -323,12 +323,12 @@ dependencies {
     def log4jVersion = "${versions.log4j}"
 
     compile 'org.jooq:jooq:3.10.8'
-    compile 'org.bouncycastle:bcprov-jdk15on:1.70'
-    compile 'org.bouncycastle:bcpkix-jdk15on:1.70'
+    compile 'org.bouncycastle:bcprov-jdk15to18:1.74'
+    compile 'org.bouncycastle:bcpkix-jdk15to18:1.74'
     compile 'org.xerial:sqlite-jdbc:3.41.2.2'
-    compile 'com.google.guava:guava:30.1-jre'
+    compile 'com.google.guava:guava:32.0.1-jre'
     compile 'com.google.code.gson:gson:2.9.0'
-    compile 'org.checkerframework:checker-qual:3.5.0'
+    compile 'org.checkerframework:checker-qual:3.33.0'
     compile "com.fasterxml.jackson.core:jackson-annotations:${jacksonVersion}"
     compile "com.fasterxml.jackson.core:jackson-databind:${jacksonDataBindVersion}"
     compile group: 'org.apache.logging.log4j', name: 'log4j-api', version: "${log4jVersion}"