diff --git a/deny.toml b/deny.toml
index 58f0670..bea43f0 100644
--- a/deny.toml
+++ b/deny.toml
@@ -59,6 +59,16 @@ ignore = [
     { id = "RUSTSEC-2024-0418", reason = "gtk-rs GTK3 binding unmaintained; optional `tray` feature only (libappindicator→gtk3), no GTK4 tray path yet" },
     { id = "RUSTSEC-2024-0419", reason = "gtk-rs GTK3 binding unmaintained; optional `tray` feature only (libappindicator→gtk3), no GTK4 tray path yet" },
     { id = "RUSTSEC-2024-0420", reason = "gtk-rs GTK3 binding unmaintained; optional `tray` feature only (libappindicator→gtk3), no GTK4 tray path yet" },
+    # ── quick-xml 0.39.4 — two DoS advisories in the D-Bus introspection-XML parser. LINUX-ONLY and
+    #    transitive: the ONLY consumer is gpui's Linux AT-SPI accessibility stack
+    #    (gpui_linux → accesskit_unix → atspi → zbus-lockstep → zbus_xml → quick-xml); it does not
+    #    compile into the shipped macOS binary (`cargo tree` on the mac host resolves 0 copies).
+    #    Liveness (CPU / memory exhaustion), not a custody or confidentiality risk. No in-tree fix:
+    #    `zbus_xml 5.1.1` pins `quick-xml ^0.39`, so the fixed `>=0.41.0` is unselectable until the
+    #    pinned gpui git stack advances accesskit/atspi/zbus — which moves only via `just bump-gpui`.
+    #    Re-evaluate (and drop) on the next gpui bump.
+    { id = "RUSTSEC-2026-0194", reason = "quick-xml quadratic duplicate-attribute-name DoS; Linux-only, transitive via gpui AT-SPI (zbus_xml pins ^0.39, not in the macOS binary); liveness-only; re-evaluate on just bump-gpui" },
+    { id = "RUSTSEC-2026-0195", reason = "quick-xml unbounded namespace-declaration allocation memory-exhaustion DoS; Linux-only, transitive via gpui AT-SPI (zbus_xml pins ^0.39, not in the macOS binary); liveness-only; re-evaluate on just bump-gpui" },
 ]
 
 [licenses]