diff --git a/tika-parent/pom.xml b/tika-parent/pom.xml
index 7814924db7..fdf98750e9 100644
--- a/tika-parent/pom.xml
+++ b/tika-parent/pom.xml
@@ -1061,6 +1061,14 @@
                 <artifactId>h2</artifactId>
                 <version>2.2.224</version>
             </exclude>
+            <!-- CVE-2023-39913: Uima is used because ctakes is used in the
+            natural language process module. Serialization is only on data that is configured in
+            tika-config.xml. We don't think we'd be vulnerable to crafted user input. -->
+            <coordinate>
+                <groupId>org.apache.uima</groupId>
+                <artifactId>uimaj-core</artifactId>
+                <version>3.4.1</version>
+            </coordinate>
           </excludeCoordinates>
           <fail>true</fail>
         </configuration>