diff --git a/pom.xml b/pom.xml
index 5e41a2e..541ce84 100644
--- a/pom.xml
+++ b/pom.xml
@@ -123,6 +123,12 @@
 			<groupId>org.keycloak</groupId>
 			<artifactId>keycloak-quarkus-server</artifactId>
 			<scope>provided</scope>
+			<exclusions>
+				<exclusion><!-- references ancient `commons-io` -->
+					<groupId>com.openshift</groupId>
+					<artifactId>openshift-restclient-java</artifactId>
+				</exclusion>
+			</exclusions>
 		</dependency>
 		<dependency>
 			<groupId>org.keycloak</groupId>