diff --git a/pkgs/by-name/bi/bindle/package.nix b/pkgs/by-name/bi/bindle/package.nix
index b86cc0fff827d..cc39c730ece43 100644
--- a/pkgs/by-name/bi/bindle/package.nix
+++ b/pkgs/by-name/bi/bindle/package.nix
@@ -42,5 +42,9 @@ rustPlatform.buildRustPackage rec {
     license = licenses.asl20;
     maintainers = [ ];
     platforms = platforms.unix;
+
+    knownVulnerabilities = [
+      "'bindle' is vulnerable to CVE-2025-62518 and upstream has been archived"
+    ];
   };
 }