From ff53d3f9fd896247cbf19ce5a7e07c2ee61ef1ab Mon Sep 17 00:00:00 2001
From: "akshay.kachore" <akshay.kachore@trianz.com>
Date: Thu, 27 Nov 2025 14:39:16 +0530
Subject: [PATCH] cve fix

---
 athena-clickhouse/pom.xml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/athena-clickhouse/pom.xml b/athena-clickhouse/pom.xml
index 90392ff57b..193b96e83e 100644
--- a/athena-clickhouse/pom.xml
+++ b/athena-clickhouse/pom.xml
@@ -70,6 +70,22 @@
                         <goals>
                             <goal>shade</goal>
                         </goals>
+                        <configuration>
+                            <filters>
+                                <filter>
+                                    <artifact>*:*</artifact>
+                                    <excludes>
+                                        <exclude>META-INF/*.SF</exclude>
+                                        <exclude>META-INF/*.DSA</exclude>
+                                        <exclude>META-INF/*.RSA</exclude>
+                                        <!-- Fix for CVE-2025-48924 and CVE-2020-15250: Exclude all Maven metadata files -->
+                                        <!-- This excludes all pom.xml and pom.properties files that may declare vulnerable dependency versions -->
+                                        <exclude>META-INF/maven/**/pom.xml</exclude>
+                                        <exclude>META-INF/maven/**/pom.properties</exclude>
+                                    </excludes>
+                                </filter>
+                            </filters>
+                        </configuration>
                     </execution>
                 </executions>
             </plugin>