diff --git a/airsonic-main/cve-suppressed.xml b/airsonic-main/cve-suppressed.xml
index 152e4de7..8666d322 100644
--- a/airsonic-main/cve-suppressed.xml
+++ b/airsonic-main/cve-suppressed.xml
@@ -163,4 +163,9 @@
        <gav regex="true">.*slf4j.*</gav>
        <cve>CVE-2018-8088</cve>
     </suppress>
+    <suppress>
+       <notes><![CDATA[This only impacts spring 5.0.5 which we dont use]]></notes>
+       <gav regex="true">.*spring.*</gav>
+       <cve>CVE-2018-1258</cve>
+    </suppress>
 </suppressions>