diff --git a/csharp/ql/src/Security Features/CWE-937/VulnerablePackageBAD.csproj b/csharp/ql/src/Security Features/CWE-937/VulnerablePackageBAD.csproj
index b13494984ecb..98275b86a6fc 100644
--- a/csharp/ql/src/Security Features/CWE-937/VulnerablePackageBAD.csproj	
+++ b/csharp/ql/src/Security Features/CWE-937/VulnerablePackageBAD.csproj	
@@ -9,7 +9,7 @@
 
   <ItemGroup>
     <PackageReference Include="Microsoft.Build" Version="15.8.166" />
-    <PackageReference Include="System.Net.Http" Version="4.3.1" />
+    <PackageReference Include="System.Net.Http" Version="4.3.4" />
   </ItemGroup>
 
 </Project>