diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml
index 1f1675858c..f203c2757f 100644
--- a/.build/dependency-check-suppressions.xml
+++ b/.build/dependency-check-suppressions.xml
@@ -89,5 +89,10 @@
         <cve>CVE-2022-42003</cve>
         <cve>CVE-2022-42004</cve>
     </suppress>
+    <!-- https://issues.apache.org/jira/browse/CASSANDRA-18389 -->
+    <suppress>
+        <packageUrl regex="true">^pkg:maven/com\.fasterxml\.jackson\.core/jackson\-core.*$</packageUrl>
+        <cve>CVE-2022-45688</cve>
+    </suppress>
 
 </suppressions>
diff --git a/CHANGES.txt b/CHANGES.txt
index 924f7d82ff..d231ded448 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -5,6 +5,7 @@
  * Update zstd-jni to version 1.5.4-1 (CASSANDRA-18259)
  * Split and order IDEA workspace template VM_PARAMETERS (CASSANDRA-18242)
 Merged from 3.11:
+ * Suppress CVE-2022-45688 (CASSANDRA-18389)
 Merged from 3.0:
  * Save host id to system.local and flush immediately after startup (CASSANDRA-18153)
  * Fix the ordering of sstables when running sstableupgrade tool (CASSANDRA-18143)