diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml
index 47d37c53db..e3e244e62b 100644
--- a/.build/dependency-check-suppressions.xml
+++ b/.build/dependency-check-suppressions.xml
@@ -61,6 +61,7 @@
         <cve>CVE-2022-41881</cve>
         <cve>CVE-2022-41915</cve>
         <cve>CVE-2023-34462</cve>
+        <cve>CVE-2023-44487</cve>
     </suppress>
 
     <!-- https://issues.apache.org/jira/browse/CASSANDRA-14760 -->
diff --git a/CHANGES.txt b/CHANGES.txt
index dc7c263cc8..683a5c10cc 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -3,6 +3,7 @@
  * Revert CASSANDRA-18543 (CASSANDRA-18854)
  * Fix NPE when using udfContext in UDF after a restart of a node (CASSANDRA-18739)
 Merged from 3.0:
+ * Suppress CVE-2023-44487 (CASSANDRA-18943)
  * Fix nodetool enable/disablebinary to correctly set rpc readiness in gossip (CASSANDRA-18935)
  * Implement the logic in bin/stop-server (CASSANDRA-18838) 
  * Upgrade snappy-java to 1.1.10.4 (CASSANDRA-18878)