NuGet package using insecure version of System.Security.Cryptography.Xml

[Deus-Vult]

Hi!

I've installed the Axinom.Cpix package from NuGet and I'm getting a security warning when using this package:

robin@Odysseus:~/projects/CpixConsumer/src$ dotnet restore
Restore succeeded with 1 warning(s) in 0.6s
    /home/robin/projects/CpixConsumer/src/CpixConsumer.csproj : warning NU1902: Package 'System.Security.Cryptography.Xml' 4.5.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-vh55-786g-wjwj

Build succeeded with 1 warning(s) in 0.7s

And I'm sure that it's coming from the Axinom package:

robin@Odysseus:~/projects/CpixConsumer/src$ dotnet nuget why System.Security.Cryptography.Xml
Project 'Module' has the following dependency graph(s) for 'System.Security.Cryptography.Xml':

  [net10.0]
   │  
   └─ Axinom.Cpix (v2.7.1)
      └─ 
System.Security.Cryptography.Xml (v4.5.0)

It would be nice to see this resolved 🙂