diff --git a/android/config/dependency-check-suppression.xml b/android/config/dependency-check-suppression.xml
index 57e19a9d54b1..d2bb95dc9a85 100644
--- a/android/config/dependency-check-suppression.xml
+++ b/android/config/dependency-check-suppression.xml
@@ -51,4 +51,13 @@
         <packageUrl regex="true">^pkg:maven/com\.squareup\.okio/okio@.*$</packageUrl>
         <cve>CVE-2023-3635</cve>
     </suppress>
+    <suppress>
+        <notes><![CDATA[
+          This CVE only affect programs using loadXML and is derived from using ksp.
+          We do not use the loadXML, ksp is used to generate navigation paths in our code
+          and not for processesing any user input.
+        ]]></notes>
+        <packageUrl regex="true">^pkg:maven/com\.google\.devtools\.ksp/symbol\-processing.*@.*$</packageUrl>
+        <cve>CVE-2018-1000840</cve>
+    </suppress>
 </suppressions>