diff --git a/Directory.Packages.props b/Directory.Packages.props
index 7c9c4f6..ac388c2 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -14,6 +14,7 @@
     <PackageVersion Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.10" />
     <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.10" />
     <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
+    <PackageVersion Include="Microsoft.OpenApi" Version="2.11.0" />
     <PackageVersion Include="Microsoft.Web.LibraryManager.Build" Version="3.0.114" />
     <PackageVersion Include="Mindscape.Raygun4Net.AspNetCore" Version="11.2.5" />
     <PackageVersion Include="Mindscape.Raygun4Net.Extensions.Logging" Version="11.2.5" />
@@ -25,6 +26,7 @@
     <PackageVersion Include="NunitXml.TestLogger" Version="8.0.0" />
     <PackageVersion Include="SonarAnalyzer.CSharp" Version="10.29.0.143774" />
     <PackageVersion Include="coverlet.collector" Version="10.0.1" />
+    <PackageVersion Include="SQLitePCLRaw.lib.e_sqlite3" Version="2.1.12" />
     <PackageVersion Include="ZLogger" Version="2.5.10" />
   </ItemGroup>
 </Project>
\ No newline at end of file
diff --git a/package-readme.md b/package-readme.md
new file mode 100644
index 0000000..5830bf2
--- /dev/null
+++ b/package-readme.md
@@ -0,0 +1,9 @@
+# NuGet Package maintenance
+
+Some transitive NuGet packages have been updated directly to work around vulnerable dependencies in other packages.
+
+- `Microsoft.OpenApi` 2.11.0 has added to `EmailQueue.API` to avoid a vulnerable version in
+  `Microsoft.AspNetCore.OpenApi`.
+
+- `SQLitePCLRaw.lib.e_sqlite3` 2.1.12 has added to `EmailQueue.API` to avoid a vulnerable version in
+  `Microsoft.EntityFrameworkCore.Sqlite`.
\ No newline at end of file
diff --git a/samples/Sample.WebApp/Sample.WebApp.csproj b/samples/Sample.WebApp/Sample.WebApp.csproj
index 69b1ec8..cede26e 100644
--- a/samples/Sample.WebApp/Sample.WebApp.csproj
+++ b/samples/Sample.WebApp/Sample.WebApp.csproj
@@ -10,6 +10,7 @@
         <PackageReference Include="Microsoft.AspNetCore.DataProtection.EntityFrameworkCore" />
         <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" />
         <PackageReference Include="Microsoft.Web.LibraryManager.Build" />
+        <PackageReference Include="SQLitePCLRaw.lib.e_sqlite3" />
     </ItemGroup>
 
     <ItemGroup>
diff --git a/src/EmailQueue.API/EmailQueue.API.csproj b/src/EmailQueue.API/EmailQueue.API.csproj
index 8d2a9c9..363a91a 100644
--- a/src/EmailQueue.API/EmailQueue.API.csproj
+++ b/src/EmailQueue.API/EmailQueue.API.csproj
@@ -15,6 +15,8 @@
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
         </PackageReference>
         <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" />
+        <PackageReference Include="Microsoft.OpenApi" />
+        <PackageReference Include="SQLitePCLRaw.lib.e_sqlite3" />
         <PackageReference Include="ZLogger"/>
     </ItemGroup>
 
diff --git a/tests/EmailQueue.API.Tests/EmailProcessorServiceTests.cs b/tests/EmailQueue.API.Tests/EmailProcessorServiceTests.cs
index 94e5ae7..ffda471 100644
--- a/tests/EmailQueue.API.Tests/EmailProcessorServiceTests.cs
+++ b/tests/EmailQueue.API.Tests/EmailProcessorServiceTests.cs
@@ -11,6 +11,7 @@
 
 namespace EmailQueue.API.Tests;
 
+#pragma warning disable CA1873
 [TestFixture]
 public class EmailProcessorServiceTests
 {
@@ -160,7 +161,7 @@ public async Task ProcessEmailAsync_WhenSuccessful_MarksAsSentAndSavesChanges()
         using var scope = new AssertionScope();
         _emailTask.Status.Should().Be("Sent");
         await _emailService.Received(1).SendEmailAsync(Arg.Is<Message>(m =>
-            m.SenderEmail == _emailTask.From &&
+            m!.SenderEmail == _emailTask.From &&
             m.SenderName == _emailTask.FromName &&
             m.Recipients.Contains(_emailTask.Recipients[0]) &&
             m.CopyRecipients.Contains(_emailTask.CopyRecipients![0]) &&
@@ -186,7 +187,7 @@ public async Task ProcessEmailAsyncWithNullFromName_WhenSuccessful_SendsMessageW
         await _sut.ProcessEmailAsync(emailTask);
 
         // Assert
-        await _emailService.Received(1).SendEmailAsync(Arg.Is<Message>(m => m.SenderName == null));
+        await _emailService.Received(1).SendEmailAsync(Arg.Is<Message>(m => m!.SenderName == null));
     }
 
     [Test]
@@ -204,6 +205,7 @@ public async Task ProcessEmailAsyncWithEmptyFromName_WhenSuccessful_SendsMessage
         await _sut.ProcessEmailAsync(emailTask);
 
         // Assert
-        await _emailService.Received(1).SendEmailAsync(Arg.Is<Message>(m => m.SenderName == string.Empty));
+        await _emailService.Received(1).SendEmailAsync(Arg.Is<Message>(m => m!.SenderName == string.Empty));
     }
 }
+#pragma warning restore CA1873