diff --git a/deny.toml b/deny.toml
index ef1adf5d5da00..e571de12a7f71 100644
--- a/deny.toml
+++ b/deny.toml
@@ -48,4 +48,6 @@ ignore = [
   { id = "RUSTSEC-2020-0168", reason = "mach is unmaintained" },
   { id = "RUSTSEC-2024-0436", reason = "paste is unmaintained" },
   { id = "RUSTSEC-2025-0012", reason = "backoff is unmaintained" },
+  # rustls-pemfile is unmaintained. Blocked by both async-nats and http 1.0.0 upgrade.
+  { id = "RUSTSEC-2025-0134", reason = "rustls-pemfile is unmaintained" },
 ]