From bd4bbd64cd3fd2dfd5f105fbe90eddb50fc787c3 Mon Sep 17 00:00:00 2001
From: Jan Werner <jwerner@confluent.io>
Date: Sat, 16 Aug 2025 13:09:55 -0400
Subject: [PATCH] exclude json-smart to avoid bringing a vulnerable version

---
 ksqldb-engine/pom.xml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/ksqldb-engine/pom.xml b/ksqldb-engine/pom.xml
index 29f0b18f20f0..c9b8e14d79e8 100644
--- a/ksqldb-engine/pom.xml
+++ b/ksqldb-engine/pom.xml
@@ -32,6 +32,12 @@
             <groupId>com.jayway.jsonpath</groupId>
             <artifactId>json-path</artifactId>
             <version>2.9.0</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>net.minidev</groupId>
+                    <artifactId>json-smart</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
         <dependency>
             <groupId>io.confluent.ksql</groupId>