Suppress false security warning.

owasp.xml

@@ -37,4 +37,18 @@
         <notes>No usages of com.google.common.io.Files#createTempDir</notes>
         <cve>CVE-2020-8908</cve>
     </suppress>
+    <suppress>
+        <notes>
+            This is when trying to serialize recursive datastructures,
+            such as a list containing itself or similar.
+
+            Since an attacker can only craft strings that are *de*-serialized it
+            is impossible to use this "exploit" and it is only something we can
+            do to ourselves.
+
+            The same problem exists with Map#hashCode for example and everyone
+            is fine with that.
+        </notes>
+        <cve>CVE-2023-35116</cve>
+    </suppress>
 </suppressions>