diff --git a/dotnet/Directory.Packages.props b/dotnet/Directory.Packages.props
index 871f35361f2e..23f865172071 100644
--- a/dotnet/Directory.Packages.props
+++ b/dotnet/Directory.Packages.props
@@ -169,7 +169,8 @@
     <PackageVersion Include="Humanizer" Version="2.14.1" />
     <!-- Plugins -->
     <PackageVersion Include="DocumentFormat.OpenXml" Version="3.3.0" />
-    <PackageVersion Include="Microsoft.Data.Sqlite" Version="9.0.10" />
+    <PackageVersion Include="Microsoft.Data.Sqlite" Version="10.0.9" />
+    <PackageVersion Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.3" /><!-- Vulnerability fix: GHSA-2m69-gcr7-jv3q; transitively pinned via Microsoft.Data.Sqlite -->
     <PackageVersion Include="DuckDB.NET.Data.Full" Version="1.2.0" />
     <PackageVersion Include="DuckDB.NET.Data" Version="1.1.3" />
     <PackageVersion Include="MongoDB.Driver" Version="3.5.2" />
diff --git a/dotnet/src/VectorData/SqliteVec/SqliteVec.csproj b/dotnet/src/VectorData/SqliteVec/SqliteVec.csproj
index ab5a3f4798dd..88da58505596 100644
--- a/dotnet/src/VectorData/SqliteVec/SqliteVec.csproj
+++ b/dotnet/src/VectorData/SqliteVec/SqliteVec.csproj
@@ -35,6 +35,7 @@
     <PackageReference Include="System.Linq.AsyncEnumerable" />
     <PackageReference Include="System.Numerics.Tensors" />
     <PackageReference Include="sqlite-vec" />
+    <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" /><!-- Pin to patched version; overrides transitive 2.1.11 from Microsoft.Data.Sqlite (GHSA-2m69-gcr7-jv3q) -->
   </ItemGroup>
 
   <ItemGroup>