diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl
index 54b96cdb94..e5803d0c52 100644
--- a/.release/security-scan.hcl
+++ b/.release/security-scan.hcl
@@ -79,6 +79,7 @@ binary {
 		suppress {
 			# N.b. `vulnerabilites` is the correct spelling for this tool.
 			vulnerabilites = [
+				"CVE-2024-8096", # curl@8.9.1-r0
 			]
 			paths = [
 				"internal/tools/proto-gen-rpc-glue/e2e/consul/*",