diff --git a/ci/ios/upload-vm/osv-scanner.toml b/ci/ios/upload-vm/osv-scanner.toml
new file mode 100644
index 000000000000..1a26a0cfe2b1
--- /dev/null
+++ b/ci/ios/upload-vm/osv-scanner.toml
@@ -0,0 +1,8 @@
+# See repository root `osv-scanner.toml` for instructions and rules for this file.
+
+# rexml: The REXML gem before 3.3.6 has a DoS vulnerability when it parses an XML
+# that has many deep elements that have same local name attributes.
+[[IgnoredVulns]]
+id = "CVE-2024-43398" # GHSA-952p-6rrq-rcjv
+ignoreUntil = 2024-11-23
+reason = "rexml only parses trusted input (responses from Apple's APIs) in this code"
diff --git a/ios/osv-scanner.toml b/ios/osv-scanner.toml
new file mode 100644
index 000000000000..1a26a0cfe2b1
--- /dev/null
+++ b/ios/osv-scanner.toml
@@ -0,0 +1,8 @@
+# See repository root `osv-scanner.toml` for instructions and rules for this file.
+
+# rexml: The REXML gem before 3.3.6 has a DoS vulnerability when it parses an XML
+# that has many deep elements that have same local name attributes.
+[[IgnoredVulns]]
+id = "CVE-2024-43398" # GHSA-952p-6rrq-rcjv
+ignoreUntil = 2024-11-23
+reason = "rexml only parses trusted input (responses from Apple's APIs) in this code"