diff --git a/bom/pom.xml b/bom/pom.xml
index 51fef3a5a..f9d1f2fe8 100644
--- a/bom/pom.xml
+++ b/bom/pom.xml
@@ -327,6 +327,12 @@
                 <groupId>org.apache.wss4j</groupId>
                 <artifactId>wss4j-ws-security-common</artifactId>
                 <version>${wss4j.version}</version>
+                <exclusions>
+                    <exclusion>
+                        <groupId>io.dropwizard.metrics</groupId>
+                        <artifactId>metrics-core</artifactId>
+                    </exclusion>
+                </exclusions>
             </dependency>
             <dependency>
                 <groupId>org.apache.wss4j</groupId>
diff --git a/src/build/enforcer-rules/quarkus-cxf-banned-dependencies.xml b/src/build/enforcer-rules/quarkus-cxf-banned-dependencies.xml
index 333eb7b64..1b55f0e07 100644
--- a/src/build/enforcer-rules/quarkus-cxf-banned-dependencies.xml
+++ b/src/build/enforcer-rules/quarkus-cxf-banned-dependencies.xml
@@ -7,6 +7,7 @@
                 <exclude>com.sun.activation:jakarta.activation</exclude><!-- use jakarta.activation:jakarta.activation-api and angus-activation instead -->
                 <exclude>com.sun.mail:javax.mail</exclude><!-- use angus-mail and jakarta.mail:jakarta.mail-api instead -->
                 <exclude>com.sun.mail:jakarta.mail</exclude><!-- use angus-mail and jakarta.mail:jakarta.mail-api instead -->
+                <exclude>io.dropwizard.metrics:metrics-core</exclude><!-- Transitive of org.apache.wss4j:wss4j-ws-security-common -> org.opensaml:opensaml-saml-impl we can do without -->
                 <exclude>org.eclipse.angus:jakarta.mail</exclude><!-- org.eclipse.angus:jakarta.mail aggregates classes from angus-mail and jakarta.mail:jakarta.mail-api which we prefer to use instead -->
                 <exclude>org.apache.cxf:cxf-integration-jca</exclude><!-- Unsupported by Quarkus CXF https://docs.quarkiverse.io/quarkus-cxf/dev/reference/index.html#unsupported -->
                 <exclude>org.apache.cxf:cxf-rt-bindings-jbi</exclude><!-- Unsupported by Quarkus CXF https://docs.quarkiverse.io/quarkus-cxf/dev/reference/index.html#unsupported -->