From ce83430bdbbbca3a727c6dd93fd1997da86288b2 Mon Sep 17 00:00:00 2001
From: "Eric J. Smith" <eric@codesmithtools.com>
Date: Wed, 14 Oct 2026 08:46:31 -0500
Subject: [PATCH] Patch System.Security.Cryptography.Pkcs for .NET advisories

MimeKit (through MailKit) allows System.Security.Cryptography.Pkcs 10.0.0,
which GHSA-2fmv-rv2c-59x7 and GHSA-846f-f764-76mx (CVE-2026-70162 and
CVE-2026-84008, published October 13) flag. NuGet audit treats those
warnings as errors, so restore fails on every branch. Reference the patched
10.0.13 directly.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 src/Exceptionless.Insulation/Exceptionless.Insulation.csproj | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/Exceptionless.Insulation/Exceptionless.Insulation.csproj b/src/Exceptionless.Insulation/Exceptionless.Insulation.csproj
index 572142569a..734aa1fb52 100644
--- a/src/Exceptionless.Insulation/Exceptionless.Insulation.csproj
+++ b/src/Exceptionless.Insulation/Exceptionless.Insulation.csproj
@@ -19,6 +19,8 @@
     <PackageReference Include="Serilog.Settings.Configuration" Version="10.0.1" />
     <PackageReference Include="Serilog.Sinks.Console" Version="6.1.1" />
     <PackageReference Include="Serilog.Sinks.ExceptionLess" Version="5.0.0" />
+    <!-- MimeKit (via MailKit) allows 10.0.0, which has GHSA-2fmv-rv2c-59x7 and GHSA-846f-f764-76mx. -->
+    <PackageReference Include="System.Security.Cryptography.Pkcs" Version="10.0.13" />
     <PackageReference Include="YamlDotNet" Version="18.1.0" />
   </ItemGroup>
   <ItemGroup>