From 2c0d92706fcfa25558545a85cd3de0805665a391 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 21 Jul 2026 03:43:53 +0000
Subject: [PATCH 1/3] Bump System.Security.Cryptography.Xml from 8.0.3 to
 9.0.18

---
updated-dependencies:
- dependency-name: System.Security.Cryptography.Xml
  dependency-version: 9.0.18
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .../Amazon.Lambda.PowerShellHost.csproj                         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Libraries/src/Amazon.Lambda.PowerShellHost/Amazon.Lambda.PowerShellHost.csproj b/Libraries/src/Amazon.Lambda.PowerShellHost/Amazon.Lambda.PowerShellHost.csproj
index 3af3022e1..8f5fe3446 100644
--- a/Libraries/src/Amazon.Lambda.PowerShellHost/Amazon.Lambda.PowerShellHost.csproj
+++ b/Libraries/src/Amazon.Lambda.PowerShellHost/Amazon.Lambda.PowerShellHost.csproj
@@ -14,7 +14,7 @@
 
   <ItemGroup Condition="'$(TargetFramework)' == 'net8.0'">
     <PackageReference Include="Microsoft.PowerShell.SDK" Version="7.4.14" />
-    <PackageReference Include="System.Security.Cryptography.Xml" Version="8.0.3" />
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="9.0.18" />
   </ItemGroup>
   <ItemGroup Condition="'$(TargetFramework)' == 'net10.0'">
     <PackageReference Include="Microsoft.PowerShell.SDK" Version="7.6.0" />

From c231c84ef4ded5e8bf2d8c42edf99da79b259c1d Mon Sep 17 00:00:00 2001
From: Sanket Tangade <sankettangade99@gmail.com>
Date: Tue, 21 Jul 2026 12:04:00 -0700
Subject: [PATCH 2/3] Add autover change file for
 System.Security.Cryptography.Xml bump

---
 .../changes/c7234838-a835-4042-9e15-a9ad20729dd5.json | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 .autover/changes/c7234838-a835-4042-9e15-a9ad20729dd5.json

diff --git a/.autover/changes/c7234838-a835-4042-9e15-a9ad20729dd5.json b/.autover/changes/c7234838-a835-4042-9e15-a9ad20729dd5.json
new file mode 100644
index 000000000..d7e402628
--- /dev/null
+++ b/.autover/changes/c7234838-a835-4042-9e15-a9ad20729dd5.json
@@ -0,0 +1,11 @@
+{
+  "Projects": [
+    {
+      "Name": "Amazon.Lambda.PowerShellHost",
+      "Type": "Patch",
+      "ChangelogMessages": [
+        "Update System.Security.Cryptography.Xml dependency from 8.0.3 to 9.0.18"
+      ]
+    }
+  ]
+}

From 5a7998bef7f64e0d0ef18590e109a05b97549ea6 Mon Sep 17 00:00:00 2001
From: Sanket Tangade <sankettangade99@gmail.com>
Date: Tue, 21 Jul 2026 13:51:32 -0700
Subject: [PATCH 3/3] Bump System.Security.Cryptography.Xml net10.0 pin from
 10.0.7 to 10.0.10 to fix NU1903 vulnerabilities

---
 .autover/changes/c7234838-a835-4042-9e15-a9ad20729dd5.json      | 2 +-
 .../Amazon.Lambda.PowerShellHost.csproj                         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.autover/changes/c7234838-a835-4042-9e15-a9ad20729dd5.json b/.autover/changes/c7234838-a835-4042-9e15-a9ad20729dd5.json
index d7e402628..a282d600f 100644
--- a/.autover/changes/c7234838-a835-4042-9e15-a9ad20729dd5.json
+++ b/.autover/changes/c7234838-a835-4042-9e15-a9ad20729dd5.json
@@ -4,7 +4,7 @@
       "Name": "Amazon.Lambda.PowerShellHost",
       "Type": "Patch",
       "ChangelogMessages": [
-        "Update System.Security.Cryptography.Xml dependency from 8.0.3 to 9.0.18"
+        "Update System.Security.Cryptography.Xml dependency to address known vulnerabilities (net8.0: 8.0.3 to 9.0.18, net10.0: 10.0.7 to 10.0.10)"
       ]
     }
   ]
diff --git a/Libraries/src/Amazon.Lambda.PowerShellHost/Amazon.Lambda.PowerShellHost.csproj b/Libraries/src/Amazon.Lambda.PowerShellHost/Amazon.Lambda.PowerShellHost.csproj
index 8f5fe3446..f4d848f2b 100644
--- a/Libraries/src/Amazon.Lambda.PowerShellHost/Amazon.Lambda.PowerShellHost.csproj
+++ b/Libraries/src/Amazon.Lambda.PowerShellHost/Amazon.Lambda.PowerShellHost.csproj
@@ -18,7 +18,7 @@
   </ItemGroup>
   <ItemGroup Condition="'$(TargetFramework)' == 'net10.0'">
     <PackageReference Include="Microsoft.PowerShell.SDK" Version="7.6.0" />
-    <PackageReference Include="System.Security.Cryptography.Xml" Version="10.0.7" />
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="10.0.10" />
   </ItemGroup>
   <ItemGroup>
     <ProjectReference Include="..\Amazon.Lambda.Core\Amazon.Lambda.Core.csproj" />