diff --git a/Version.props b/Version.props
index 3cdeff8..8f8eb5d 100644
--- a/Version.props
+++ b/Version.props
@@ -40,7 +40,7 @@
         <VerifyXunitV3Version>32.0.0</VerifyXunitV3Version>
         <MicrosoftCodeAnalysisTestingVersion>1.1.4</MicrosoftCodeAnalysisTestingVersion>
         <XunitV3MtpV2Version>4.0.0</XunitV3MtpV2Version>
-        <MicrosoftAspNetCoreOpenApiVersion>10.0.9</MicrosoftAspNetCoreOpenApiVersion>
+        <MicrosoftAspNetCoreOpenApiVersion>10.0.11</MicrosoftAspNetCoreOpenApiVersion>
         <!-- Transitive pin: Microsoft.AspNetCore.OpenApi 10.0.9 pulls in Microsoft.OpenApi 2.0.0, which is
              vulnerable to CVE-2026-49451 (GHSA-v5pm-xwqc-g5wc, stack overflow on circular schema refs).
              Patched in the 2.x line at 2.7.5; pin to the latest 2.x to satisfy NU1903 (warnings-as-errors)