diff --git a/src/IdentityFlow.Data/IdentityFlow.Data.csproj b/src/IdentityFlow.Data/IdentityFlow.Data.csproj
index 4cd5923..a46a964 100644
--- a/src/IdentityFlow.Data/IdentityFlow.Data.csproj
+++ b/src/IdentityFlow.Data/IdentityFlow.Data.csproj
@@ -12,6 +12,8 @@
     </PackageReference>
     <PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" Version="10.0.11" />
     <PackageReference Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="10.0.11" />
+    <!-- Patched DoS fixes (GHSA-846f-f764-76mx, GHSA-2fmv-rv2c-59x7); SqlClient and Identity.Web pull in older ones. -->
+    <PackageReference Include="System.Security.Cryptography.Pkcs" Version="10.0.13" />
   </ItemGroup>
 
   <PropertyGroup>