diff --git a/Directory.Packages.props b/Directory.Packages.props
index 3374fa244c..1c117caf86 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -62,14 +62,17 @@
   <ItemGroup Condition="'$(TargetFramework)' == 'net8.0'">
     <PackageVersion Update="Microsoft.Extensions.Configuration" Version="[8.0.0,)" />
     <PackageVersion Update="Microsoft.Extensions.Options" Version="[8.0.0,)" />
+    <PackageVersion Update="System.Security.Cryptography.Xml" Version="[8.0.3,)" />
   </ItemGroup>
   <ItemGroup Condition="'$(TargetFramework)' == 'net9.0'">
     <PackageVersion Update="Microsoft.Extensions.Configuration" Version="[9.0.0,)" />
     <PackageVersion Update="Microsoft.Extensions.Options" Version="[9.0.0,)" />
+    <PackageVersion Update="System.Security.Cryptography.Xml" Version="[9.0.15,)" />
   </ItemGroup>
   <ItemGroup Condition="'$(TargetFramework)' == 'net10.0'">
     <PackageVersion Update="Microsoft.Extensions.Configuration" Version="[10.0.0,)" />
     <PackageVersion Update="Microsoft.Extensions.Options" Version="[10.0.0,)" />
+    <PackageVersion Update="System.Security.Cryptography.Xml" Version="[10.0.6,)" />
   </ItemGroup>
 
   <ItemGroup Label="Production other packages">
diff --git a/src/OpenTelemetry.Instrumentation.Wcf/CHANGELOG.md b/src/OpenTelemetry.Instrumentation.Wcf/CHANGELOG.md
index 056e52659b..dbb010a123 100644
--- a/src/OpenTelemetry.Instrumentation.Wcf/CHANGELOG.md
+++ b/src/OpenTelemetry.Instrumentation.Wcf/CHANGELOG.md
@@ -5,6 +5,11 @@
 * Updated OpenTelemetry core component version(s) to `1.15.2`.
   ([#4080](https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/4080))
 
+* Update `System.Security.Cryptography.Xml` dependency versions for .NET 8, 9 and
+  10 to pick up fixes for [GHSA-w3x6-4m5h-cxqf](https://github.com/dotnet/runtime/security/advisories/GHSA-w3x6-4m5h-cxqf)
+  and [GHSA-37gx-xxp4-5rgx](https://github.com/dotnet/runtime/security/advisories/GHSA-37gx-xxp4-5rgx).
+  ([#4103](https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/4103))
+
 ## 1.15.0-beta.1
 
 Released 2026-Jan-21