diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml
index ae7ff368a7..b7ebb45e57 100644
--- a/.build/dependency-check-suppressions.xml
+++ b/.build/dependency-check-suppressions.xml
@@ -20,15 +20,6 @@
   https://jeremylong.github.io/DependencyCheck/general/suppression.html
 -->
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
-    <suppress>
-        <!-- not applicable since 4.0 -->
-        <packageUrl regex="true">^pkg:maven/com\.datastax\.cassandra/cassandra\-driver\-core@.*$</packageUrl>
-        <cve>CVE-2018-8016</cve>
-        <cve>CVE-2019-2684</cve>
-        <cve>CVE-2020-13946</cve>
-        <cve>CVE-2020-17516</cve>
-        <cve>CVE-2021-44521</cve>
-    </suppress>
     <suppress>
         <!--  https://issues.apache.org/jira/browse/CASSANDRA-17907 -->
         <packageUrl regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl>
@@ -44,34 +35,12 @@
         <cve>CVE-2021-4235</cve>
         <cve>CVE-2017-18640</cve>
     </suppress>
-    <suppress>
-        <!-- dependency checker identified this as a completely different package (wire) -->
-        <packageUrl regex="true">^pkg:maven/net\.openhft/chronicle\-wire@.*$</packageUrl>
-        <cpe>cpe:/a:wire:wire</cpe>
-    </suppress>
     <suppress>
         <!-- not applicable https://nvd.nist.gov/vuln/detail/CVE-2020-8908 -->
         <packageUrl regex="true">^pkg:maven/com\.google\.guava/guava@.*$</packageUrl>
         <cve>CVE-2020-8908</cve>
         <cve>CVE-2023-2976</cve>
     </suppress>
-    <!-- https://issues.apache.org/jira/browse/CASSANDRA-18146 -->
-    <suppress>
-        <packageUrl regex="true">^pkg:maven/org\.apache\.commons.*$</packageUrl>
-        <cve>CVE-2021-37533</cve>
-    </suppress>
-    <suppress>
-        <packageUrl regex="true">^pkg:maven/commons-io/.*$</packageUrl>
-        <cve>CVE-2021-37533</cve>
-    </suppress>
-    <suppress>
-        <packageUrl regex="true">^pkg:maven/commons-cli/.*$</packageUrl>
-        <cve>CVE-2021-37533</cve>
-    </suppress>
-    <suppress>
-        <packageUrl regex="true">^pkg:maven/commons-codec/.*$</packageUrl>
-        <cve>CVE-2021-37533</cve>
-    </suppress>
     <!-- netty's http stuff is not applicable here -->
     <suppress>
         <packageUrl regex="true">^pkg:maven/io\.netty/netty\-all@.*$</packageUrl>
@@ -94,10 +63,4 @@
         <cve>CVE-2023-35116</cve>
     </suppress>
 
-    <!-- https://issues.apache.org/jira/browse/CASSANDRA-18643 -->
-    <suppress>
-        <packageUrl regex="true">^pkg:maven/com\.fasterxml\.jackson\.core/jackson\-core@.*$</packageUrl>
-        <cve>CVE-2022-45688</cve>
-    </suppress>
-
 </suppressions>
diff --git a/CHANGES.txt b/CHANGES.txt
index 6bb86a057a..0f33ba0e2e 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -6,6 +6,7 @@ Merged from 4.0:
  * Migrate Python optparse to argparse (CASSANDRA-17914)
 Merged from 3.11:
 Merged from 3.0:
+ * Remove unused suppressions (CASSANDRA-18724)
 
 
 4.1.3