diff --git a/src/PostQuantum.DataProtection/PostQuantum.DataProtection.csproj b/src/PostQuantum.DataProtection/PostQuantum.DataProtection.csproj
index 8d9d395..965de57 100644
--- a/src/PostQuantum.DataProtection/PostQuantum.DataProtection.csproj
+++ b/src/PostQuantum.DataProtection/PostQuantum.DataProtection.csproj
@@ -70,7 +70,7 @@
     <!-- BouncyCastle is only needed on net8.0 and net9.0 — net10.0 uses System.Security.Cryptography.MLKem directly. -->
     <PackageReference Include="BouncyCastle.Cryptography" Version="2.6.2" Condition="'$(TargetFramework)' != 'net10.0'" />
     <PackageReference Include="PostQuantum.KeyManagement" Version="0.4.0-preview.2" />
-    <PackageReference Include="Microsoft.AspNetCore.DataProtection.Abstractions" Version="8.0.27" />
+    <PackageReference Include="Microsoft.AspNetCore.DataProtection.Abstractions" Version="10.0.8" />
     <PackageReference Include="Microsoft.AspNetCore.DataProtection.Extensions" Version="8.0.27" />
     <PackageReference Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="8.0.2" />
     <PackageReference Include="Microsoft.Extensions.Options" Version="8.0.2" />