From 9428c00e30bd16ca3de925379f1e1872b912c3cd Mon Sep 17 00:00:00 2001
From: Missy Messa <mjanecke@microsoft.com>
Date: Mon, 20 Apr 2026 10:39:34 -0700
Subject: [PATCH] Update NuGet and System.Security.Cryptography.Xml for CG
 alerts

- NuGet.* 7.0.1 -> 7.0.3 (GHSA-g4vj-cjjj-v7hg)
- System.Security.Cryptography.Xml 10.0.3 -> 10.0.6 (CVE-2026-33116, CVE-2026-26171)
---
 eng/Version.Details.props |  2 +-
 eng/Versions.props        | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/eng/Version.Details.props b/eng/Version.Details.props
index 145460f34b6..ecb3855818a 100644
--- a/eng/Version.Details.props
+++ b/eng/Version.Details.props
@@ -38,7 +38,7 @@ This file should be imported by eng/Versions.props
     <SystemCompositionPackageVersion>10.0.3</SystemCompositionPackageVersion>
     <SystemIOPackagingPackageVersion>10.0.3</SystemIOPackagingPackageVersion>
     <SystemSecurityCryptographyPkcsPackageVersion>10.0.3</SystemSecurityCryptographyPkcsPackageVersion>
-    <SystemSecurityCryptographyXmlPackageVersion>10.0.3</SystemSecurityCryptographyXmlPackageVersion>
+    <SystemSecurityCryptographyXmlPackageVersion>10.0.6</SystemSecurityCryptographyXmlPackageVersion>
     <!-- dotnet-sdk dependencies -->
     <MicrosoftNETSdkWorkloadManifestReaderPackageVersion>9.0.100-preview.6.24328.19</MicrosoftNETSdkWorkloadManifestReaderPackageVersion>
     <!-- dotnet-symreader-converter dependencies -->
diff --git a/eng/Versions.props b/eng/Versions.props
index 00e71372322..30c4c5aa544 100644
--- a/eng/Versions.props
+++ b/eng/Versions.props
@@ -16,11 +16,11 @@
     <!-- nuget -->
     <!-- Important: Don't version higher than what's available in the toolset SDK as
          NuGet assemblies aren't redistributed with .NETCoreApp msbuild tasks. -->
-    <NuGetCommandsVersion>7.0.1</NuGetCommandsVersion>
-    <NuGetFrameworksVersion>7.0.1</NuGetFrameworksVersion>
-    <NuGetPackagingVersion>7.0.1</NuGetPackagingVersion>
-    <NuGetProjectModelVersion>7.0.1</NuGetProjectModelVersion>
-    <NuGetVersioningVersion>7.0.1</NuGetVersioningVersion>
+    <NuGetCommandsVersion>7.0.3</NuGetCommandsVersion>
+    <NuGetFrameworksVersion>7.0.3</NuGetFrameworksVersion>
+    <NuGetPackagingVersion>7.0.3</NuGetPackagingVersion>
+    <NuGetProjectModelVersion>7.0.3</NuGetProjectModelVersion>
+    <NuGetVersioningVersion>7.0.3</NuGetVersioningVersion>
     <!-- runtime -->
     <MicrosoftNETCorePlatformsVersion>5.0.0</MicrosoftNETCorePlatformsVersion>
     <MicrosoftNETRuntimeEmscripten2023Nodewin_x64>6.0.4</MicrosoftNETRuntimeEmscripten2023Nodewin_x64>