diff --git a/deny.toml b/deny.toml
index 96c376090f..66205b1108 100644
--- a/deny.toml
+++ b/deny.toml
@@ -6,6 +6,8 @@ ignore = [
     # HACK(eddyb) `instant` is unmaintained (`web-time` suggested replacement),
     # non-trivial to remove as e.g. even the latest `minifb` still uses it.
     "RUSTSEC-2024-0384",
+    # HACK(firestar99) `paste` is unmaintained, used by wgpu with no replacement available
+    "RUSTSEC-2024-0436",
 ]
 
 # This section is considered when running `cargo deny check bans`.