update json-smart version

[siddhijain]

Updated version due to a security vulnerability in 2.4.8.

[jeanbisutti]

Hi @bgavrilMS
I work on Java Application Insights. MSAL is a transitive dependency.
One of our users would like to know if CVE-2023-1370 is exploitable. Would MSAL use json-smart features potentially exposed to CVE-2023-1370? Thanks.

[siddhijain]

Hi @bgavrilMS I work on Java Application Insights. MSAL is a transitive dependency. One of our users would like to know if CVE-2023-1370 is exploitable. Would MSAL use json-smart features potentially exposed to CVE-2023-1370? Thanks.

@jeanbisutti Msal Java uses a class of net-minidev.json-smart to pass json objects to another library 'nimbus' for processing. From the way msal java uses json-smart, it does not look like it will be susceptible to the vulnerability. However, to be on the safer side, this PR updates the json-smart version to a secured version 2.4.10. Once merged, I will release a hotfix that you can consume in your application.   

[jeanbisutti]

Thanks a lot @siddhijain!