From 9cb14f1f274c17b45afbb419b5e6a5bc4672234b Mon Sep 17 00:00:00 2001
From: "Gavin Barron (from Dev Box)" <gavinbarron@microsoft.com>
Date: Mon, 20 Jul 2026 16:42:14 -0700
Subject: [PATCH] Fix System.Security.Cryptography.Xml vulnerabilities

Bump System.Security.Cryptography.Xml from 10.0.5 to 10.0.6 to address CVE-2026-33116 and CVE-2026-26171.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: b925a358-5d34-4537-8327-fe1fa580d903
---
 .../Microsoft.OpenApi.Workbench.csproj                           | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/Microsoft.OpenApi.Workbench/Microsoft.OpenApi.Workbench.csproj b/src/Microsoft.OpenApi.Workbench/Microsoft.OpenApi.Workbench.csproj
index 89cf78d37..f44ca0e8c 100644
--- a/src/Microsoft.OpenApi.Workbench/Microsoft.OpenApi.Workbench.csproj
+++ b/src/Microsoft.OpenApi.Workbench/Microsoft.OpenApi.Workbench.csproj
@@ -26,6 +26,7 @@
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
     <PackageReference Include="Microsoft.Windows.Compatibility" Version="10.0.5" />
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="10.0.6" />
   </ItemGroup>
   
   <!-- Windows-specific resources -->