From af6dcb53189b4bed8dd137c970e9ec3f23537b33 Mon Sep 17 00:00:00 2001
From: Mohit Yadav <105265192+mohityadav766@users.noreply.github.com>
Date: Thu, 7 Aug 2025 10:59:29 +0530
Subject: [PATCH] Fix Vulnerabilities (#22805)

(cherry picked from commit e40210f137721d1d4b26ae711551433f21d9f355)
---
 common/pom.xml           |  9 +++++++++
 openmetadata-mcp/pom.xml | 14 ++++++++++++++
 2 files changed, 23 insertions(+)

diff --git a/common/pom.xml b/common/pom.xml
index 440ee259100..be1ddc7613c 100644
--- a/common/pom.xml
+++ b/common/pom.xml
@@ -64,8 +64,17 @@
           <groupId>org.yaml</groupId>
           <artifactId>snakeyaml</artifactId>
         </exclusion>
+        <exclusion>
+          <groupId>org.apache.commons</groupId>
+          <artifactId>commons-lang3</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
+    <dependency>
+      <groupId>org.apache.commons</groupId>
+      <artifactId>commons-lang3</artifactId>
+      <version>3.18.0</version>
+    </dependency>
     <dependency>
       <groupId>io.dropwizard</groupId>
       <artifactId>dropwizard-jersey</artifactId>
diff --git a/openmetadata-mcp/pom.xml b/openmetadata-mcp/pom.xml
index 61223df0696..b12968f832b 100644
--- a/openmetadata-mcp/pom.xml
+++ b/openmetadata-mcp/pom.xml
@@ -39,7 +39,21 @@
                 <version>${testcontainers.version}</version>
                 <type>pom</type>
                 <scope>import</scope>
+                <exclusions>
+                    <exclusion>
+                        <groupId>org.apache.commons</groupId>
+                        <artifactId>commons-compress</artifactId>
+                    </exclusion>
+                </exclusions>
             </dependency>
+            <!-- https://mvnrepository.com/artifact/org.apache.commons/commons-compress -->
+            <dependency>
+                <groupId>org.apache.commons</groupId>
+                <artifactId>commons-compress</artifactId>
+                <version>1.27.1</version>
+                <scope>test</scope>
+            </dependency>
+
         </dependencies>
     </dependencyManagement>