From 13f502d26b7eda5e8f95d9d093c10539a0082119 Mon Sep 17 00:00:00 2001 From: Brad Flood Date: Wed, 1 Jul 2026 17:58:45 -0700 Subject: [PATCH 1/2] Fix CVE-2026-33116: Pin System.Security.Cryptography.Xml to 8.0.2 --- .../testengine.user.storagestate.csproj | 1 + 1 file changed, 1 insertion(+) diff --git a/src/testengine.user.storagestate/testengine.user.storagestate.csproj b/src/testengine.user.storagestate/testengine.user.storagestate.csproj index 125636f9c..b3ebfe236 100644 --- a/src/testengine.user.storagestate/testengine.user.storagestate.csproj +++ b/src/testengine.user.storagestate/testengine.user.storagestate.csproj @@ -45,6 +45,7 @@ NU1701 + From 07b11f0ab737381baaf824987063bef47aca09e6 Mon Sep 17 00:00:00 2001 From: Brad Flood Date: Mon, 6 Jul 2026 14:47:28 -0700 Subject: [PATCH 2/2] Fix CVE-2026-33116: Pin System.Security.Cryptography.Xml to 8.0.3 Update both testengine.user.storagestate and PowerAppsTestEngineWrapper projects to pin System.Security.Cryptography.Xml to 8.0.3, which resolves both CVE-2026-33116 and GHSA-w3x6-4m5h-cxqf (8.0.2 was also vulnerable). Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .../PowerAppsTestEngineWrapper.csproj | 1 + .../testengine.user.storagestate.csproj | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/src/PowerAppsTestEngineWrapper/PowerAppsTestEngineWrapper.csproj b/src/PowerAppsTestEngineWrapper/PowerAppsTestEngineWrapper.csproj index 97a9e9da3..4a7963a74 100644 --- a/src/PowerAppsTestEngineWrapper/PowerAppsTestEngineWrapper.csproj +++ b/src/PowerAppsTestEngineWrapper/PowerAppsTestEngineWrapper.csproj @@ -48,6 +48,7 @@ NU1701 + diff --git a/src/testengine.user.storagestate/testengine.user.storagestate.csproj b/src/testengine.user.storagestate/testengine.user.storagestate.csproj index b3ebfe236..f4d70db7c 100644 --- a/src/testengine.user.storagestate/testengine.user.storagestate.csproj +++ b/src/testengine.user.storagestate/testengine.user.storagestate.csproj @@ -45,7 +45,7 @@ NU1701 - +