add exclusion for jetty-io
<artifactId>commons-dbcp</artifactId>
<version>1.4</version>
</exclude>
+ <exclude>
+ <!-- CVE-2022-2191 applies to jetty 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 -->
+ <groupId>org.eclipse.jetty</groupId>
+ <artifactId>jetty-io</artifactId>
+ <version>9.4.48.v20220622</version>
+ </exclude>
</excludeCoordinates>
<fail>true</fail>
</configuration>
