Exclude dom4j dep causing security vunerability