diff --git a/deny.toml b/deny.toml
index e90b4df349678..c1d9acafab693 100644
--- a/deny.toml
+++ b/deny.toml
@@ -42,6 +42,7 @@ license-files = [
 ignore = [
   { id = "RUSTSEC-2023-0071", reason = "rsa marvin attack - unpatched upstream (https://github.com/vectordotdev/vector/issues/19262)" },
   { id = "RUSTSEC-2024-0388", reason = "derivative is unmaintained (https://github.com/vectordotdev/vector/issues/24940)" },
+  { id = "RUSTSEC-2024-0449", reason = "unsafe-libyaml is unmaintained with no patched release; used by serde_yaml and VRL's serde_yaml_ng, whose backend migration is pending upstream (https://github.com/acatton/serde-yaml-ng/issues/5)" },
   { id = "RUSTSEC-2025-0134", reason = "rustls-pemfile is unmaintained - unpatched crate (https://github.com/bytebeamio/rumqtt/issues/1010) & tonic/reqwest upgrade (https://github.com/vectordotdev/vector/issues/19179)" },
   { id = "RUSTSEC-2026-0049", reason = "rustls-webpki 0.102 is vulnerable - tonic upgrade (https://github.com/vectordotdev/vector/issues/19179)" },
   { id = "RUSTSEC-2026-0098", reason = "rustls-webpki 0.102 is vulnerable - tonic upgrade (https://github.com/vectordotdev/vector/issues/19179)" },