diff --git a/doc/changes/changes_4.0.5.md b/doc/changes/changes_4.0.5.md
index e598c5c47..7344e7771 100644
--- a/doc/changes/changes_4.0.5.md
+++ b/doc/changes/changes_4.0.5.md
@@ -2,6 +2,10 @@
Code name:
+## Bug Fixes
+
+* #427: Excluded transitive `org.apache.httpcomponents:httpclient` dependency to avoid CVE-2020-13956.
+
## Documentation
* #408: Removed PostgreSQL dialect documentation as it has been migrated to https://github.com/exasol/postgresql-virtual-schema.
@@ -16,6 +20,7 @@ Code name:
## Dependency updates
-* Removed org.postgresql:postgresql:42.2.18
-* Removed org.testcontainers:postgresql:1.15.0
* Updated `com.exasol:virtual-schema-common-jdbc:7.0.0` to `8.0.0`
+* Removed `org.postgresql:postgresql:42.2.18`
+* Removed `org.testcontainers:postgresql:1.15.0`
+* Removed `org.apache.httpcomponents:httpclient`
diff --git a/pom.xml b/pom.xml
index e1e0deb65..63625c5f4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -123,6 +123,10 @@
test
+
+ org.apache.httpcomponents
+ httpclient
+
org.eclipse.jetty
*
@@ -173,6 +177,12 @@
libthrift
0.13.0
test
+
+
+ org.apache.httpcomponents
+ httpclient
+
+
@@ -189,6 +199,10 @@
test
+
+ org.apache.httpcomponents
+ httpclient
+
org.eclipse.jetty
*
@@ -321,7 +335,7 @@
assembly/all-dependencies.xml
- virtual-schema-dist-${vscjdbc.version}-bundle-${version}
+ virtual-schema-dist-${vscjdbc.version}-bundle-${project.version}
false
@@ -356,35 +370,28 @@
- org.sonatype.ossindex.maven
- ossindex-maven-plugin
- 3.1.0
+ org.codehaus.mojo
+ versions-maven-plugin
+ 2.8.1
package
- audit
+ display-plugin-updates
+ display-dependency-updates
-
-
-
- 7ea56ad4-8a8b-4e51-8ed9-5aad83d8efb1
-
-
- org.codehaus.mojo
- versions-maven-plugin
- 2.7
+ org.sonatype.ossindex.maven
+ ossindex-maven-plugin
+ 3.1.0
package
- display-plugin-updates
- display-dependency-updates
+ audit
@@ -427,5 +434,33 @@
+
+
+
+ maven-clean-plugin
+ 3.1.0
+
+
+ maven-deploy-plugin
+ 3.0.0-M1
+
+
+ maven-install-plugin
+ 3.0.0-M1
+
+
+ maven-jar-plugin
+ 3.2.0
+
+
+ maven-resources-plugin
+ 3.2.0
+
+
+ maven-site-plugin
+ 3.9.1
+
+
+
\ No newline at end of file