diff --git a/Directory.Packages.props b/Directory.Packages.props
index 11686d1aa..9d3f94001 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -53,5 +53,8 @@
     <PackageVersion Include="yamldotnet" Version="15.1.6" />
     <PackageVersion Include="Faker.net" Version="2.0.163" />
     <PackageVersion Include="Valleysoft.DockerfileModel" Version="1.1.1" />
+
+    <!-- Fix security alerts -->
+    <PackageVersion Include="System.Formats.Asn1" Version="6.0.1" />
   </ItemGroup>
 </Project>
\ No newline at end of file
diff --git a/src/Microsoft.ComponentDetection.Detectors/Microsoft.ComponentDetection.Detectors.csproj b/src/Microsoft.ComponentDetection.Detectors/Microsoft.ComponentDetection.Detectors.csproj
index aaf297b83..18c8518a9 100644
--- a/src/Microsoft.ComponentDetection.Detectors/Microsoft.ComponentDetection.Detectors.csproj
+++ b/src/Microsoft.ComponentDetection.Detectors/Microsoft.ComponentDetection.Detectors.csproj
@@ -15,6 +15,9 @@
         <PackageReference Include="System.Threading.Tasks.Dataflow" />
         <PackageReference Include="Tomlyn.Signed" />
         <PackageReference Include="Valleysoft.DockerfileModel " />
+
+        <!-- Fix alerts -->
+        <PackageReference Include="System.Formats.Asn1" />
     </ItemGroup>
 
     <ItemGroup Label="Package References">