diff --git a/deny.toml b/deny.toml
index e15f5b709..56de9525f 100644
--- a/deny.toml
+++ b/deny.toml
@@ -1,6 +1,7 @@
 [advisories]
 ignore = [
   "RUSTSEC-2024-0436", # Paste is unmaintained, whatever.
+  "RUSTSEC-2025-0046", # wasmtime, only impacting WASI, tracked in https://github.com/filecoin-project/ref-fvm/issues/2186
 ]
 
 [bans]