From 5a72164b6848ceec484b692469e89ff3c29098b8 Mon Sep 17 00:00:00 2001
From: John Cardinal <support@ayanova.com>
Date: Sun, 25 Oct 2026 08:45:23 -0700
Subject: [PATCH] 8.1.1 pin System.Security.Cryptography.Pkcs 10.0.13
 (CVE-2026-84008, CVE-2026-70162)

---
 server/sockeye.csproj | 1 +
 1 file changed, 1 insertion(+)

diff --git a/server/sockeye.csproj b/server/sockeye.csproj
index c0aca04..0e963a1 100644
--- a/server/sockeye.csproj
+++ b/server/sockeye.csproj
@@ -24,6 +24,7 @@
     <PackageReference Include="Enums.NET" Version="5.0.0" />    
     <PackageReference Include="jose-jwt" Version="5.3.0" />    
     <PackageReference Include="MailKit" Version="4.18.0" />
+    <PackageReference Include="System.Security.Cryptography.Pkcs" Version="10.0.13" />
     <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.12" />  
     <PackageReference Include="Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version="10.0.12" />
     <PackageReference Include="Asp.Versioning.Mvc" Version="10.2.1" />