diff --git a/Directory.Packages.props b/Directory.Packages.props
index 6fdef18..748309d 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -29,7 +29,7 @@
     <PackageVersion Include="Microsoft.CodeAnalysis.Workspaces.MSBuild" Version="5.6.0" />
     <PackageVersion Include="Microsoft.Build.Locator" Version="1.11.2" />
     <PackageVersion Include="Microsoft.Build.Framework" Version="18.6.3" />
-    <PackageVersion Include="Microsoft.NET.StringTools" Version="18.6.3" />
+    <PackageVersion Include="Microsoft.NET.StringTools" Version="18.9.6" />
   </ItemGroup>
   <!-- Networking -->
   <ItemGroup>
diff --git a/src/Wick.Core/Wick.Core.csproj b/src/Wick.Core/Wick.Core.csproj
index 99c55a6..ca73a6a 100644
--- a/src/Wick.Core/Wick.Core.csproj
+++ b/src/Wick.Core/Wick.Core.csproj
@@ -15,6 +15,7 @@
     <PackageReference Include="Microsoft.Extensions.Hosting.Abstractions" />
     <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" />
     <PackageReference Include="Microsoft.Extensions.DependencyInjection.Abstractions" />
+    <PackageReference Include="Microsoft.NET.StringTools" VersionOverride="18.9.6" />
     <PackageReference Include="StreamJsonRpc" />
     <!-- Direct references so the patched versions pinned centrally win
          over StreamJsonRpc 2.24.92's vulnerable transitive floors