From 8edd241e937303540371abe474329ba9162a44c6 Mon Sep 17 00:00:00 2001
From: Tamara Rivera <tamita.rivera@gmail.com>
Date: Wed, 11 Dec 2024 14:04:21 -0800
Subject: [PATCH] Pinned dependencies

---
 src/NServiceBus.NHibernate/NServiceBus.NHibernate.csproj | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/NServiceBus.NHibernate/NServiceBus.NHibernate.csproj b/src/NServiceBus.NHibernate/NServiceBus.NHibernate.csproj
index a5156978..fc7fb3c2 100644
--- a/src/NServiceBus.NHibernate/NServiceBus.NHibernate.csproj
+++ b/src/NServiceBus.NHibernate/NServiceBus.NHibernate.csproj
@@ -18,6 +18,11 @@
     <PackageReference Include="Obsolete.Fody" Version="5.3.0" PrivateAssets="All" />
     <PackageReference Include="Particular.Packaging" Version="4.2.0" PrivateAssets="All" />
   </ItemGroup>
+  
+  <ItemGroup Label="Direct references to transitive dependencies to avoid versions with CVE">
+    <PackageReference Include="System.Net.Http" Version="4.3.4" PrivateAssets="All"/>
+    <PackageReference Include="System.Text.RegularExpressions" Version="4.3.1" PrivateAssets="All"/>
+  </ItemGroup>
 
   <ItemGroup>
     <InternalsVisibleTo Include="NServiceBus.NHibernate.PersistenceTests" Key="$(NServiceBusTestsKey)" />