diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl
index e5803d0c52b1..3edf2cac8245 100644
--- a/.release/security-scan.hcl
+++ b/.release/security-scan.hcl
@@ -38,6 +38,7 @@ container {
 		suppress {
 			# N.b. `vulnerabilites` is the correct spelling for this tool.
 			vulnerabilites = [
+				"CVE-2024-8096", # curl@8.9.1-r2,
 			]
 			paths = [
 				"internal/tools/proto-gen-rpc-glue/e2e/consul/*",
@@ -79,7 +80,6 @@ binary {
 		suppress {
 			# N.b. `vulnerabilites` is the correct spelling for this tool.
 			vulnerabilites = [
-				"CVE-2024-8096", # curl@8.9.1-r0
 			]
 			paths = [
 				"internal/tools/proto-gen-rpc-glue/e2e/consul/*",