diff --git a/pom.xml b/pom.xml
index b55ecdebdc..d5e246b7ed 100644
--- a/pom.xml
+++ b/pom.xml
@@ -764,6 +764,11 @@
                 <groupId>com.aliyun.oss</groupId>
                 <artifactId>aliyun-sdk-oss</artifactId>
                 <exclusions>
+                    <!-- transitive dependency this exclusion is fixing CVE-2022-41404 -->
+                    <exclusion>
+                        <groupId>org.ini4j</groupId>
+                        <artifactId>ini4j</artifactId>
+                    </exclusion>
                     <exclusion>
                         <groupId>javax.xml.bind</groupId>
                         <artifactId>jaxb-api</artifactId>