From df7b5ae1c468fc84dd3d8eb63f7d4f35344c8c92 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 20 Oct 2025 12:59:04 +0000
Subject: [PATCH] Bump Microsoft.AspNetCore.OpenApi from 8.0.13 to 8.0.21

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 8.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 apps/dotnet-webapi/VulnerableApi/VulnerableApi.csproj | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/dotnet-webapi/VulnerableApi/VulnerableApi.csproj b/apps/dotnet-webapi/VulnerableApi/VulnerableApi.csproj
index bc1cdcf..205d508 100644
--- a/apps/dotnet-webapi/VulnerableApi/VulnerableApi.csproj
+++ b/apps/dotnet-webapi/VulnerableApi/VulnerableApi.csproj
@@ -7,7 +7,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="8.0.13" />
+    <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="8.0.21" />
     <PackageReference Include="Swashbuckle.AspNetCore" Version="6.6.2" />
     <PackageReference Include="System.Data.SqlClient" Version="4.8.6" />
   </ItemGroup>