diff --git a/explorer/.cargo/audit.toml b/explorer/.cargo/audit.toml
index fcddadc0a..152ac5655 100644
--- a/explorer/.cargo/audit.toml
+++ b/explorer/.cargo/audit.toml
@@ -7,4 +7,9 @@ ignore = [
   # compiled for any target we build. postcard 1.x pins heapless ^0.7, so this
   # can only be resolved upstream.
   "RUSTSEC-2023-0089",
+  # crypto-bigint 0.5 reaches the lockfile through radicle-crypto ->
+  # ssh-agent-lib -> ssh-key -> p256. Radicle uses Ed25519 only, so the p256
+  # code path is never entered. The fix is in 0.7, but p256 pins crypto-bigint
+  # ^0.5, so a lockfile update cannot apply it.
+  "RUSTSEC-2026-0387",
 ]