diff --git a/dependencyCheckSuppression.xml b/dependencyCheckSuppression.xml
index f209cc4863..18545254c5 100644
--- a/dependencyCheckSuppression.xml
+++ b/dependencyCheckSuppression.xml
@@ -279,4 +279,17 @@
         <packageUrl regex="true">^pkg:maven/io\.netty/netty\-handler@.*$</packageUrl>
         <vulnerabilityName>CVE-2023-4586</vulnerabilityName>
     </suppress>
+
+    <!--
+    json-java versioning does not work with cpe; suppressing specifically for CVE-2023-5072
+    -->
+    <suppress>
+        <notes><![CDATA[
+   file name: json-20231013.jar
+   ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.json/json@.*$</packageUrl>
+        <cve>CVE-2023-5072</cve>
+    </suppress>
+
 </suppressions>
+