diff --git a/src/SQLBI.Whiteboard.Export/SQLBI.Whiteboard.Export.csproj b/src/SQLBI.Whiteboard.Export/SQLBI.Whiteboard.Export.csproj
index 9a2383f..b67f86e 100644
--- a/src/SQLBI.Whiteboard.Export/SQLBI.Whiteboard.Export.csproj
+++ b/src/SQLBI.Whiteboard.Export/SQLBI.Whiteboard.Export.csproj
@@ -10,5 +10,8 @@
     <PackageReference Include="DocumentFormat.OpenXml" Version="3.5.1" />
     <!-- PDFsharp (Core build): MIT, managed-only, no native binary to sign. -->
     <PackageReference Include="PdfSharp" Version="6.2.4" />
+    <!-- Direct reference, because the version DocumentFormat.OpenXml pulls in (8.0.1) has
+         advisories GHSA-846f-f764-76mx and GHSA-2fmv-rv2c-59x7 and the audit fails the build. -->
+    <PackageReference Include="System.Security.Cryptography.Pkcs" Version="10.0.13" />
   </ItemGroup>
 </Project>