diff --git a/deny.toml b/deny.toml
index 029c4003a..412869204 100644
--- a/deny.toml
+++ b/deny.toml
@@ -119,3 +119,7 @@ name = "redox_syscall"
 name = "windows-sys"
 [[bans.skip-tree]]
 name = "windows"
+
+[[bans.skip]]
+# deep in dependency tree, dual use via tokio and hyper  (needs a bump there)
+name = "socket2"