diff --git a/crates/tinycdb-rs/RUSTSEC-0000-0000.md b/crates/tinycdb-rs/RUSTSEC-0000-0000.md
new file mode 100644
index 0000000000..726a401a95
--- /dev/null
+++ b/crates/tinycdb-rs/RUSTSEC-0000-0000.md
@@ -0,0 +1,15 @@
+```toml
+[advisory]
+id = "RUSTSEC-0000-0000"
+package = "tinycdb-rs"
+date = "2026-01-30"
+url = "https://github.com/andrew-d/tinycdb-rs/issues/6"
+informational = "unmaintained"
+
+[versions]
+patched = []
+```
+
+# tinycdb-rs is unmaintained
+
+tinycdb-rs will no longer be maintained as the last commit was 11 years ago. The project has an unsoundness issue, which can further lead to a memory safety bug as in [issue #6](https://github.com/andrew-d/tinycdb-rs/issues/6).
\ No newline at end of file