diff --git a/.cargo/audit.toml b/.cargo/audit.toml
new file mode 100644
index 00000000..7f385934
--- /dev/null
+++ b/.cargo/audit.toml
@@ -0,0 +1,4 @@
+[advisories]
+# serde_cbor is unmaintained, used in criterion.
+# See https://github.com/bheisler/criterion.rs/issues/534
+ignore = [ "RUSTSEC-2021-0127" ]
\ No newline at end of file
diff --git a/deny.toml b/deny.toml
index 6264fee7..8f0c5a5e 100644
--- a/deny.toml
+++ b/deny.toml
@@ -11,6 +11,11 @@ yanked = "deny"
 notice = "deny"
 unsound = "deny"
 vulnerability = "deny"
+ignore = [
+    # serde_cbor is unmaintained, used in criterion.
+    # See https://github.com/bheisler/criterion.rs/issues/534
+    "RUSTSEC-2021-0127",
+]
 
 [licenses]
 unlicensed = "deny"