Currently, the project uses <PackageReference Include="Portable.BouncyCastle" Version="1.8.1.3" /> This version has a security alert https://github.com/bcgit/bc-csharp/wiki/CVE-2020-15522