diff --git a/cve-suppressions.xml b/cve-suppressions.xml
index b48848cc..3d851acd 100644
--- a/cve-suppressions.xml
+++ b/cve-suppressions.xml
@@ -31,4 +31,11 @@
    ]]></notes>
    <cve>CVE-2022-45688</cve>
 </suppress>
+<suppress>
+   <notes><![CDATA[
+   This CVE is a false positive according to the Jackson project maintainers.
+   See https://github.com/FasterXML/jackson-databind/issues/3972
+   ]]></notes>
+   <cve>CVE-2023-35116</cve>
+</suppress>
 </suppressions>