Security vulnerability common.compress version 1.25

[MrCoolK]

Hello,
I am using serenity version 4.1.3 .which uses “ org.apache.commons:commons-compress:jar:1.25.0” .
Looks like 1.25.0 has security vulnerability
I added project dependency management to download compress version 1.26 and exclusion under serenity-core.
Script runs fine but when it tries to create the report using aggregate it try’s to download org.apache.commons:commons-compress:jar:1.25.0 and it errors out since that version is quarantined by nexus .

How can i force aggregate to use compress version 1.26 instead of 1.25

ERROR] Failed to execute goal net.serenity-bdd.maven.plugins:serenity-maven-plugin:4.1.3:aggregate (serenity-reports) on project :Execution serenity-reports of goal net.serenity-bdd.maven.plugins:serenity-maven-plugin:4.1.3:aggregate failed: Plugin net.serenity-bdd.maven.plugins:serenity-maven-plugin:4.1.3 or one of its dependencies could not be resolved: Could not transfer artifact org.apache.commons:commons-compress:jar:1.25.0 from/to nexus.

[MrCoolK]

Resolved the issue problem was in exclusion