diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml
index 26e3305a85..ae7ff368a7 100644
--- a/.build/dependency-check-suppressions.xml
+++ b/.build/dependency-check-suppressions.xml
@@ -84,6 +84,7 @@
         <cve>CVE-2022-24823</cve>
         <cve>CVE-2022-41881</cve>
         <cve>CVE-2022-41915</cve>
+        <cve>CVE-2023-34462</cve>
     </suppress>
     <!-- https://issues.apache.org/jira/browse/CASSANDRA-17966 -->
     <suppress>
diff --git a/CHANGES.txt b/CHANGES.txt
index 855989f24a..bf53e8aa08 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -167,6 +167,7 @@ Merged from 3.11:
  * Fix error message handling when trying to use CLUSTERING ORDER with non-clustering column (CASSANDRA-17818
  * Add keyspace and table name to exception message during ColumnSubselection deserialization (CASSANDRA-18346)
 Merged from 3.0:
+ * Suppress CVE-2023-34462 (CASSANDRA-18649)
  * Add support for AWS Ec2 IMDSv2 (CASSANDRA-16555)
  * Suppress CVE-2023-35116 (CASSANDRA-18630)
  * Pass taskId from CompactionTask to system.compaction_history (CASSANDRA-12183)