diff --git a/packages/wasm-utxo/deny.toml b/packages/wasm-utxo/deny.toml
index 53029c6bbdd..f91106ba2dc 100644
--- a/packages/wasm-utxo/deny.toml
+++ b/packages/wasm-utxo/deny.toml
@@ -1,3 +1,8 @@
+[advisories]
+# core2 is unmaintained (RUSTSEC-2026-0105) but no safe upgrade is available;
+# it's a transitive dependency of zcash crates (zcash_encoding, zcash_primitives, zebra-chain).
+ignore = [{ id = "RUSTSEC-2026-0105" }]
+
 # Deny multiple versions of dependencies
 [bans]
 multiple-versions = "deny"