diff --git a/dependencyCheckSuppression.xml b/dependencyCheckSuppression.xml
index 7dc3684337..15817a19c7 100644
--- a/dependencyCheckSuppression.xml
+++ b/dependencyCheckSuppression.xml
@@ -233,4 +233,13 @@
         <cve>CVE-2023-35887</cve>
     </suppress>
 
+    <!-- 23.0.1 includes the patch for this low severity CVE but it's still matching so manually suppress it -->
+    <suppress>
+        <notes><![CDATA[
+   file name: graal-sdk-23.0.1.jar
+   ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.graalvm\.sdk/graal\-sdk@.*$</packageUrl>
+        <vulnerabilityName>CVE-2023-22006</vulnerabilityName>
+    </suppress>
+
 </suppressions>
\ No newline at end of file
diff --git a/gradle.properties b/gradle.properties
index 1e88261639..49f996792c 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -157,7 +157,7 @@ googleHttpClientVersion=1.43.2
 googleOauthClientVersion=1.34.1
 googleProtocolBufVersion=3.21.9
 
-graalVersion=22.3.1
+graalVersion=23.0.1
 
 # Cloud and SequenceAnalysis bring gson in as a transitive dependency.
 # We resolve to the later version here to keep things consistent