diff --git a/ci/ios/upload-vm/osv-scanner.toml b/ci/ios/upload-vm/osv-scanner.toml
new file mode 100644
index 000000000000..63bb78c2b87d
--- /dev/null
+++ b/ci/ios/upload-vm/osv-scanner.toml
@@ -0,0 +1,5 @@
+[[PackageOverrides]]
+effectiveUntil = 2025-04-01
+ignore = true
+name = "rexml"
+reason = "The XML payload is generated by Apple tooling which we trust"
\ No newline at end of file
diff --git a/ios/osv-scanner.toml b/ios/osv-scanner.toml
new file mode 100644
index 000000000000..63bb78c2b87d
--- /dev/null
+++ b/ios/osv-scanner.toml
@@ -0,0 +1,5 @@
+[[PackageOverrides]]
+effectiveUntil = 2025-04-01
+ignore = true
+name = "rexml"
+reason = "The XML payload is generated by Apple tooling which we trust"
\ No newline at end of file