From d559e6590e2260fca29d767b30b4873785afb33c Mon Sep 17 00:00:00 2001
From: Stefan Yonkov <mrstefan.yonkov@gmail.com>
Date: Thu, 19 Jun 2025 14:33:21 +0300
Subject: [PATCH] fix CVE-2022-41404

---
 pom.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pom.xml b/pom.xml
index b55ecdebdc..d5e246b7ed 100644
--- a/pom.xml
+++ b/pom.xml
@@ -764,6 +764,11 @@
                 <groupId>com.aliyun.oss</groupId>
                 <artifactId>aliyun-sdk-oss</artifactId>
                 <exclusions>
+                    <!-- transitive dependency this exclusion is fixing CVE-2022-41404 -->
+                    <exclusion>
+                        <groupId>org.ini4j</groupId>
+                        <artifactId>ini4j</artifactId>
+                    </exclusion>
                     <exclusion>
                         <groupId>javax.xml.bind</groupId>
                         <artifactId>jaxb-api</artifactId>