diff --git a/.cargo/audit.toml b/.cargo/audit.toml
index b4e7b2d43b..0a54839ea8 100644
--- a/.cargo/audit.toml
+++ b/.cargo/audit.toml
@@ -39,6 +39,11 @@ ignore = [
     # why needed: part of `arrow`
     # upstream issue: https://github.com/google/flatbuffers/issues/6627
     "RUSTSEC-2021-0122",
+
+    # title: serde_cbor is unmaintained
+    # why needed: used by `criterion`
+    # upstream issue: https://github.com/bheisler/criterion.rs/issues/534
+    "RUSTSEC-2021-0127",
 ]
 
 [output]