diff --git a/airsonic-main/cve-suppressed.xml b/airsonic-main/cve-suppressed.xml
index 251ae9f0..20c4a161 100644
--- a/airsonic-main/cve-suppressed.xml
+++ b/airsonic-main/cve-suppressed.xml
@@ -144,4 +144,9 @@
        <gav regex="true">^stax.*$</gav>
        <cve>CVE-2017-16224</cve>
     </suppress>
+    <suppress>
+       <notes><![CDATA[False Positive for stax]]></notes>
+       <gav regex="true">^javax\.xml\.stream:stax.*$</gav>
+       <cve>CVE-2017-16224</cve>
+    </suppress>
 </suppressions>