diff --git a/shared/CopilotSDK.Shared/CopilotSDK.Shared.csproj b/shared/CopilotSDK.Shared/CopilotSDK.Shared.csproj
index a396218..ee7e937 100644
--- a/shared/CopilotSDK.Shared/CopilotSDK.Shared.csproj
+++ b/shared/CopilotSDK.Shared/CopilotSDK.Shared.csproj
@@ -6,7 +6,7 @@
     <PackageReference Include="Spectre.Console" Version="0.57.0" />
     <PackageReference Include="System.Security.Cryptography.ProtectedData" Version="10.0.9" />
     <!-- Pin transitive dependency to safe version (GHSA-2cwq-pwfr-wcw3 affects 1.0.2) -->
-    <PackageReference Include="Nerdbank.MessagePack" Version="1.2.4" />
+    <PackageReference Include="Nerdbank.MessagePack" Version="1.2.30" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/CopilotSDK.Demos.Tests/CopilotSDK.Demos.Tests.csproj b/tests/CopilotSDK.Demos.Tests/CopilotSDK.Demos.Tests.csproj
index e5751c4..ba94af1 100644
--- a/tests/CopilotSDK.Demos.Tests/CopilotSDK.Demos.Tests.csproj
+++ b/tests/CopilotSDK.Demos.Tests/CopilotSDK.Demos.Tests.csproj
@@ -13,7 +13,7 @@
     <PackageReference Include="xunit" Version="2.9.3" />
     <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
     <!-- Pin transitive dependency to safe version (GHSA-2cwq-pwfr-wcw3 affects 1.0.2) -->
-    <PackageReference Include="Nerdbank.MessagePack" Version="1.2.4" />
+    <PackageReference Include="Nerdbank.MessagePack" Version="1.2.30" />
   </ItemGroup>
 
   <ItemGroup>