Exclude connectors from Debezium supplier

Excludes the `debezium-connector-vitess` and `debezium-connector-spanner` dependencies from the `debezium-supplier` as they have CVEs.
spring-cloud · Jan 24, 2025 · 122b10e · 122b10e
1 parent db4b138
commit 122b10e
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/applications/source/debezium-source/pom.xml b/applications/source/debezium-source/pom.xml
@@ -23,6 +23,16 @@
 		<dependency>
 			<groupId>org.springframework.cloud.fn</groupId>
 			<artifactId>spring-debezium-supplier</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>io.debezium</groupId>
+                    <artifactId>debezium-connector-vitess</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>io.debezium</groupId>
+                    <artifactId>debezium-connector-spanner</artifactId>
+                </exclusion>
+            </exclusions>
 		</dependency>
 
 		<!-- TEST -->