diff --git a/Source/Trackify/Trackify.csproj b/Source/Trackify/Trackify.csproj
index 60f6762..a3d4f15 100644
--- a/Source/Trackify/Trackify.csproj
+++ b/Source/Trackify/Trackify.csproj
@@ -10,6 +10,14 @@
              flagged NU1903 — accepted repo-wide (as in Infrastructure/CLI), so don't fail the build. -->
         <NoWarn>$(NoWarn);NU1903</NoWarn>
 
+        <!-- Uno.Sdk pins Microsoft.Windows.Compatibility to 10.0.7 for the browserwasm head only
+             (its packages.json group "WindowsCompatibility"), and that carries
+             System.Security.Cryptography.Pkcs 10.0.7 — GHSA-2fmv-rv2c-59x7, raised as NU1902 and
+             therefore a build error here. 10.0.13 is the first patched 10.0.x, set through the SDK's
+             own per-group override so no direct reference to a package we never call is needed.
+             Drop this line once the Uno.Sdk pinned in global.json ships 10.0.13 or newer. -->
+        <WindowsCompatibilityVersion>10.0.13</WindowsCompatibilityVersion>
+
         <!-- Display name -->
         <ApplicationTitle>Trackify</ApplicationTitle>
         <!-- App Identifier -->