diff --git a/Directory.Packages.props b/Directory.Packages.props
index 00658d4..f1327ec 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -33,11 +33,14 @@
     <PackageVersion Include="Microsoft.CodeAnalysis.Analyzers" Version="5.3.0" />
     <!-- Source Generator Testing -->
     <PackageVersion Include="Verify.SourceGenerators" Version="2.5.0" />
-    <PackageVersion Include="Verify.NUnit" Version="31.16.2" />
+    <PackageVersion Include="Verify.NUnit" Version="31.16.3" />
     <!-- Analyzer Testing (pinned to match Microsoft.CodeAnalysis.CSharp 5.0.0) -->
     <PackageVersion Include="Microsoft.CodeAnalysis.CSharp.Analyzer.Testing" Version="1.1.3" />
     <PackageVersion Include="Microsoft.CodeAnalysis.CSharp.CodeFix.Testing" Version="1.1.3" />
     <!-- MongoDB Integration (v3.x targets netstandard2.1/net6.0+, NOT netstandard2.0) -->
     <PackageVersion Include="MongoDB.Driver" Version="3.8.0" />
+    <!-- Pin vulnerable transitive deps of MongoDB.Driver (GHSA-6c8g-7p36-r338, GHSA-pggp-6c3x-2xmx) -->
+    <PackageVersion Include="SharpCompress" Version="1.0.0" />
+    <PackageVersion Include="Snappier" Version="1.3.1" />
   </ItemGroup>
 </Project>
\ No newline at end of file
diff --git a/src/SharpDicom.MongoDB/SharpDicom.MongoDB.csproj b/src/SharpDicom.MongoDB/SharpDicom.MongoDB.csproj
index d5f96af..3976de2 100644
--- a/src/SharpDicom.MongoDB/SharpDicom.MongoDB.csproj
+++ b/src/SharpDicom.MongoDB/SharpDicom.MongoDB.csproj
@@ -18,5 +18,8 @@
   <ItemGroup>
     <PackageReference Include="Microsoft.Bcl.AsyncInterfaces" />
     <PackageReference Include="MongoDB.Driver" />
+    <!-- Pin vulnerable transitive deps of MongoDB.Driver (GHSA-6c8g-7p36-r338, GHSA-pggp-6c3x-2xmx) -->
+    <PackageReference Include="SharpCompress" />
+    <PackageReference Include="Snappier" />
   </ItemGroup>
 </Project>