diff --git a/Essentials.HashProviders.MD5/MD5HashProvider.cs b/Essentials.HashProviders.MD5/MD5HashProvider.cs
index 1e97ded..6ddd847 100644
--- a/Essentials.HashProviders.MD5/MD5HashProvider.cs
+++ b/Essentials.HashProviders.MD5/MD5HashProvider.cs
@@ -17,6 +17,7 @@ namespace ktsu.Essentials.HashProviders.MD5;
 /// registered as a singleton, concurrent callers corrupted each other's in-progress hash state.
 /// </remarks>
 [SuppressMessage("Security", "CA5351:Do Not Use Broken Cryptographic Algorithms", Justification = "This provider exists specifically to implement MD5, which callers select deliberately for compatibility")]
+[SuppressMessage("Security", "S4790:Using weak hashing algorithms is security-sensitive", Justification = "This provider exists specifically to implement MD5, which callers select deliberately for compatibility. The algorithm is fixed by the type's contract and cannot be substituted for a stronger one")]
 public class MD5HashProvider : IHashProvider
 {
 	/// <summary>
diff --git a/Essentials.HashProviders.SHA1/SHA1HashProvider.cs b/Essentials.HashProviders.SHA1/SHA1HashProvider.cs
index db06815..51ff011 100644
--- a/Essentials.HashProviders.SHA1/SHA1HashProvider.cs
+++ b/Essentials.HashProviders.SHA1/SHA1HashProvider.cs
@@ -17,6 +17,7 @@ namespace ktsu.Essentials.HashProviders.SHA1;
 /// registered as a singleton, concurrent callers corrupted each other's in-progress hash state.
 /// </remarks>
 [SuppressMessage("Security", "CA5350:Do Not Use Weak Cryptographic Algorithms", Justification = "This provider exists specifically to implement SHA-1, which callers select deliberately for compatibility")]
+[SuppressMessage("Security", "S4790:Using weak hashing algorithms is security-sensitive", Justification = "This provider exists specifically to implement SHA-1, which callers select deliberately for compatibility. The algorithm is fixed by the type's contract and cannot be substituted for a stronger one")]
 public class SHA1HashProvider : IHashProvider
 {
 	/// <summary>