From d7621538e9012610f8227519fa35ab50bded4cc0 Mon Sep 17 00:00:00 2001
From: Sasha Gurevich <sagurevich@microsoft.com>
Date: Sun, 4 Oct 2026 15:37:24 +0300
Subject: [PATCH] nuget version pinning of cryptography.xml

---
 Directory.Packages.props | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index daa94bd3..bea1d2c1 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -32,5 +32,7 @@
     <PackageVersion Include="Nerdbank.GitVersioning" Version="3.10.94" />
     <PackageVersion Include="System.IO.Packaging" Version="9.0.4" />
     <PackageVersion Include="coverlet.msbuild " Version="6.0.4" />
+    <!-- pinning to 8.0.4 due to CVE's in 8.0.0 version that comes with Microsoft.PowerShell.SDK 7.4.1  -->
+    <PackageVersion Include="System.Security.Cryptography.Xml" Version="8.0.4" />
   </ItemGroup>
 </Project>