diff --git a/src/Tk.Nuget/Tk.Nuget.csproj b/src/Tk.Nuget/Tk.Nuget.csproj
index b13b4b5..b5252f2 100644
--- a/src/Tk.Nuget/Tk.Nuget.csproj
+++ b/src/Tk.Nuget/Tk.Nuget.csproj
@@ -26,7 +26,7 @@
   <ItemGroup>
     <PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="7.0.0" />
     <PackageReference Include="NuGet.Protocol" Version="6.14.0" />
-    <PackageReference Include="Semver" Version="3.0.0" />    
+    <PackageReference Include="Semver" Version="3.0.0" />
   </ItemGroup>
 
 </Project>
diff --git a/tests/Tk.Nuget.Tests.Unit/Tk.Nuget.Tests.Unit.csproj b/tests/Tk.Nuget.Tests.Unit/Tk.Nuget.Tests.Unit.csproj
index 5ee30a6..3c055b4 100644
--- a/tests/Tk.Nuget.Tests.Unit/Tk.Nuget.Tests.Unit.csproj
+++ b/tests/Tk.Nuget.Tests.Unit/Tk.Nuget.Tests.Unit.csproj
@@ -29,7 +29,7 @@
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
     <!-- System.Formats.Asn1 is added to mitigate vulnerability. Nuget.Packaging, when built in .net 8, introduces this old package (standard 2.1 does not) -->
-    <PackageReference Include="System.Formats.Asn1" Version="9.0.9" />
+    <PackageReference Include="System.Formats.Asn1" Version="10.0.1" />
   </ItemGroup>
 
   <ItemGroup>