diff --git a/sbom.yml b/sbom.yml
index 1c6f84f51f..9948d5aa61 100644
--- a/sbom.yml
+++ b/sbom.yml
@@ -3,3 +3,11 @@ cpe: cpe:2.3:a:arm:mbed_tls:{}:*:*:*:*:*:*:*
 supplier: 'Organization: Espressif Systems (Shanghai) CO LTD'
 originator: 'Organization: Trusted Firmware <mbed-tls-security@lists.trustedfirmware.org>'
 description: An open source, portable, easy to use, readable and flexible SSL library with additional features and patches from Espressif.
+cve-keywords:
+  - mbed tls
+  - mbedtls
+cve-exclude-list:
+  - cve: CVE-2025-52496
+    reason: Fixed in 3.6.4
+  - cve: CVE-2025-27810
+    reason: Fixed in 3.6.3