diff --git a/tests/Directory.Build.props b/tests/Directory.Build.props
index 09df336..d7f0f5e 100644
--- a/tests/Directory.Build.props
+++ b/tests/Directory.Build.props
@@ -12,14 +12,15 @@
   <ItemGroup>
     <!--
       Transitive security pin (test projects only).
-      WireMock.Net -> WireMock.Net.Minimal -> Scriban.Signed 7.2.0 carries a
-      parser-recursion DoS: GHSA-6q7j-xr26-3h2c / GHSA-q6rr-fm2g-g5x8
-      (affected >= 6.6.0, <= 7.2.0). 7.2.1 is the patched release. A direct
-      PackageReference overrides the transitive 7.2.0 and clears the NU1902
-      audit error that fails the warnings-as-errors build. Remove this pin once
-      WireMock.Net ships a build that references Scriban.Signed >= 7.2.1.
+      On a clean restore WireMock.Net -> WireMock.Net.Minimal still resolves the
+      transitive Scriban.Signed to a vulnerable 7.2.x (GHSA-6q7j-xr26-3h2c /
+      GHSA-q6rr-fm2g-g5x8; affected >= 6.6.0, <= 7.2.0). A direct PackageReference
+      forces the patched 7.2.5 (>= WireMock 2.13's floor, so no NU1605 downgrade)
+      and clears the NU1902 audit error under warnings-as-errors. Remove this pin
+      only once a WireMock.Net release resolves Scriban.Signed >= 7.2.1 on a clean
+      restore (verified in CI, not just a warm local cache).
     -->
-    <PackageReference Include="Scriban.Signed" Version="7.2.1" />
+    <PackageReference Include="Scriban.Signed" Version="7.2.5" />
   </ItemGroup>
 
 </Project>
diff --git a/tests/FrigateRelay.Host.Tests/FrigateRelay.Host.Tests.csproj b/tests/FrigateRelay.Host.Tests/FrigateRelay.Host.Tests.csproj
index 7ec99e0..1cf4ee5 100644
--- a/tests/FrigateRelay.Host.Tests/FrigateRelay.Host.Tests.csproj
+++ b/tests/FrigateRelay.Host.Tests/FrigateRelay.Host.Tests.csproj
@@ -21,7 +21,7 @@
     <PackageReference Include="Microsoft.Extensions.Configuration" Version="10.0.9" />
     <PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="10.0.9" />
     <!-- WireMock.Net: HTTP stub servers for end-to-end snapshot resolution test. -->
-    <PackageReference Include="WireMock.Net" Version="2.10.0" />
+    <PackageReference Include="WireMock.Net" Version="2.11.0" />
     <!-- OpenTelemetry in-memory exporter — test-only, never in src/. Per PLAN-3.1 Task 1. -->
     <PackageReference Include="OpenTelemetry.Exporter.InMemory" Version="1.16.0" />
     <PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.9" />
diff --git a/tests/FrigateRelay.IntegrationTests.RealBroker/FrigateRelay.IntegrationTests.RealBroker.csproj b/tests/FrigateRelay.IntegrationTests.RealBroker/FrigateRelay.IntegrationTests.RealBroker.csproj
index 58d0433..b600018 100644
--- a/tests/FrigateRelay.IntegrationTests.RealBroker/FrigateRelay.IntegrationTests.RealBroker.csproj
+++ b/tests/FrigateRelay.IntegrationTests.RealBroker/FrigateRelay.IntegrationTests.RealBroker.csproj
@@ -12,7 +12,7 @@
     <PackageReference Include="MSTest" Version="4.2.3" />
     <PackageReference Include="FluentAssertions" Version="6.12.2" />
     <PackageReference Include="MQTTnet" Version="5.2.0.1603" />
-    <PackageReference Include="WireMock.Net" Version="2.10.0" />
+    <PackageReference Include="WireMock.Net" Version="2.11.0" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/FrigateRelay.IntegrationTests/FrigateRelay.IntegrationTests.csproj b/tests/FrigateRelay.IntegrationTests/FrigateRelay.IntegrationTests.csproj
index 0b8cfbb..7cb2083 100644
--- a/tests/FrigateRelay.IntegrationTests/FrigateRelay.IntegrationTests.csproj
+++ b/tests/FrigateRelay.IntegrationTests/FrigateRelay.IntegrationTests.csproj
@@ -17,7 +17,7 @@
       <IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
     </PackageReference>
     <PackageReference Include="Testcontainers" Version="4.13.0" />
-    <PackageReference Include="WireMock.Net" Version="2.10.0" />
+    <PackageReference Include="WireMock.Net" Version="2.11.0" />
     <PackageReference Include="MQTTnet" Version="5.2.0.1603" />
     <!-- OpenTelemetry in-memory exporter — test-only, never in src/. Per PLAN-3.1 Task 3. -->
     <PackageReference Include="OpenTelemetry.Exporter.InMemory" Version="1.16.0" />
diff --git a/tests/FrigateRelay.Plugins.BlueIris.Tests/FrigateRelay.Plugins.BlueIris.Tests.csproj b/tests/FrigateRelay.Plugins.BlueIris.Tests/FrigateRelay.Plugins.BlueIris.Tests.csproj
index 064ffbc..e78b687 100644
--- a/tests/FrigateRelay.Plugins.BlueIris.Tests/FrigateRelay.Plugins.BlueIris.Tests.csproj
+++ b/tests/FrigateRelay.Plugins.BlueIris.Tests/FrigateRelay.Plugins.BlueIris.Tests.csproj
@@ -16,7 +16,7 @@
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="WireMock.Net" Version="2.10.0" />
+    <PackageReference Include="WireMock.Net" Version="2.11.0" />
     <PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.9" />
   </ItemGroup>
 
diff --git a/tests/FrigateRelay.Plugins.CodeProjectAi.Tests/FrigateRelay.Plugins.CodeProjectAi.Tests.csproj b/tests/FrigateRelay.Plugins.CodeProjectAi.Tests/FrigateRelay.Plugins.CodeProjectAi.Tests.csproj
index 1e703ca..f66dcd7 100644
--- a/tests/FrigateRelay.Plugins.CodeProjectAi.Tests/FrigateRelay.Plugins.CodeProjectAi.Tests.csproj
+++ b/tests/FrigateRelay.Plugins.CodeProjectAi.Tests/FrigateRelay.Plugins.CodeProjectAi.Tests.csproj
@@ -16,7 +16,7 @@
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="WireMock.Net" Version="2.10.0" />
+    <PackageReference Include="WireMock.Net" Version="2.11.0" />
     <PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.9" />
   </ItemGroup>
 
diff --git a/tests/FrigateRelay.Plugins.Doods2.Tests/FrigateRelay.Plugins.Doods2.Tests.csproj b/tests/FrigateRelay.Plugins.Doods2.Tests/FrigateRelay.Plugins.Doods2.Tests.csproj
index 2054e98..689e351 100644
--- a/tests/FrigateRelay.Plugins.Doods2.Tests/FrigateRelay.Plugins.Doods2.Tests.csproj
+++ b/tests/FrigateRelay.Plugins.Doods2.Tests/FrigateRelay.Plugins.Doods2.Tests.csproj
@@ -16,7 +16,7 @@
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="WireMock.Net" Version="2.10.0" />
+    <PackageReference Include="WireMock.Net" Version="2.11.0" />
     <PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.9" />
   </ItemGroup>
 
diff --git a/tests/FrigateRelay.Plugins.FrigateSnapshot.Tests/FrigateRelay.Plugins.FrigateSnapshot.Tests.csproj b/tests/FrigateRelay.Plugins.FrigateSnapshot.Tests/FrigateRelay.Plugins.FrigateSnapshot.Tests.csproj
index 84a8fa7..3d878b2 100644
--- a/tests/FrigateRelay.Plugins.FrigateSnapshot.Tests/FrigateRelay.Plugins.FrigateSnapshot.Tests.csproj
+++ b/tests/FrigateRelay.Plugins.FrigateSnapshot.Tests/FrigateRelay.Plugins.FrigateSnapshot.Tests.csproj
@@ -17,7 +17,7 @@
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="WireMock.Net" Version="2.10.0" />
+    <PackageReference Include="WireMock.Net" Version="2.11.0" />
     <PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.9" />
   </ItemGroup>
 
diff --git a/tests/FrigateRelay.Plugins.Pushover.Tests/FrigateRelay.Plugins.Pushover.Tests.csproj b/tests/FrigateRelay.Plugins.Pushover.Tests/FrigateRelay.Plugins.Pushover.Tests.csproj
index 4f0162c..4908601 100644
--- a/tests/FrigateRelay.Plugins.Pushover.Tests/FrigateRelay.Plugins.Pushover.Tests.csproj
+++ b/tests/FrigateRelay.Plugins.Pushover.Tests/FrigateRelay.Plugins.Pushover.Tests.csproj
@@ -16,7 +16,7 @@
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="WireMock.Net" Version="2.10.0" />
+    <PackageReference Include="WireMock.Net" Version="2.11.0" />
     <PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.9" />
   </ItemGroup>
 
diff --git a/tests/FrigateRelay.Plugins.Roboflow.Tests/FrigateRelay.Plugins.Roboflow.Tests.csproj b/tests/FrigateRelay.Plugins.Roboflow.Tests/FrigateRelay.Plugins.Roboflow.Tests.csproj
index 44fa643..66c8cda 100644
--- a/tests/FrigateRelay.Plugins.Roboflow.Tests/FrigateRelay.Plugins.Roboflow.Tests.csproj
+++ b/tests/FrigateRelay.Plugins.Roboflow.Tests/FrigateRelay.Plugins.Roboflow.Tests.csproj
@@ -16,7 +16,7 @@
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="WireMock.Net" Version="2.10.0" />
+    <PackageReference Include="WireMock.Net" Version="2.11.0" />
     <PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.9" />
   </ItemGroup>