chore: Fix CVE-2025-48734 (#845)

Co-authored-by: Jonas Israel <jonas.israel@sap.com>

Author: Jonas-Isr

cloudplatform/connectivity-ztis/pom.xml

@@ -79,6 +79,10 @@
 					<artifactId>commons-logging</artifactId>
 					<groupId>commons-logging</groupId>
 				</exclusion>
+				<exclusion>
+					<artifactId>commons-beanutils</artifactId>
+					<groupId>commons-beanutils</groupId>
+				</exclusion>
 			</exclusions>
 		</dependency>
 		<dependency>
@@ -111,6 +115,17 @@
 			<groupId>org.slf4j</groupId>
 			<artifactId>slf4j-api</artifactId>
 		</dependency>
+		<dependency>
+			<groupId>commons-beanutils</groupId>
+			<artifactId>commons-beanutils</artifactId>
+			<scope>runtime</scope>
+			<exclusions>
+				<exclusion>
+					<artifactId>commons-logging</artifactId>
+					<groupId>commons-logging</groupId>
+				</exclusion>
+			</exclusions>
+		</dependency>
 		<dependency>
 			<groupId>org.projectlombok</groupId>
 			<artifactId>lombok</artifactId>

pom.xml

@@ -740,6 +740,8 @@
 							<ignoredUnusedDeclaredDependency>org.projectlombok:lombok</ignoredUnusedDeclaredDependency>
 							<!-- By default, JUnit5 adapters are added to every module to ensure no tests are skipped -->
 							<ignoredUnusedDeclaredDependency>org.junit.jupiter:junit-jupiter-engine</ignoredUnusedDeclaredDependency>
+							<!-- Transitive dependencies explicitly declared to fic CVEs-->
+							<ignoredUnusedDeclaredDependency>commons-beanutils:commons-beanutils</ignoredUnusedDeclaredDependency>
 						</ignoredUnusedDeclaredDependencies>
 					</configuration>
 				</plugin>