diff --git a/CHANGELOG.md b/CHANGELOG.md
index b465d436..3180a8cd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/).
 
 ## [Unreleased]
 
+## [3.2.2] - 2026-09-02
+
 ### Added
 
 - [SIL.BuildTasks] Added MakeWixForDirTree.ConsolidatedGuidFile (optional param) naming a single file to hold the GUIDs for the whole tree, instead of a `.guidsForInstaller.xml` in every directory. Any per-directory files still present under RootDirectory are merged into it, so existing GUIDs carry over unchanged and installed components keep their identity; delete them from version control once the merged file has been committed. With CheckOnly the merge happens in memory only and the task reports an error naming the files whose GUIDs are not yet in the consolidated file.
@@ -24,6 +26,17 @@ and this project adheres to [Semantic Versioning](http://semver.org/).
 
 - [SIL.BuildTasks] Fixed MakeWixForDirTree.CheckOnly deleting the previously generated wxs file. A check-only run outputs nothing, so it now leaves the existing file alone.
 
+### Security
+
+- Reverted SIL.Core from 17.0.0 to 9.0.0. 17.0.0's dependency on Mono.Unix
+  (which has never had a stable, non-prerelease NuGet release) broke restore
+  for consumers using classic `nuget.exe install` without `-Prerelease`.
+  This reintroduces a build-time-only dependency on Newtonsoft.Json 11.0.1
+  (GHSA-5crp-9r3c-p9vr, DoS via deeply-nested JSON) until libpalaso resolves
+  the Mono.Unix situation upstream — SIL.BuildTasks never processes
+  untrusted JSON and isn't shipped in consumers' compiled output (IsTool),
+  so this is scanner noise rather than a real exploit path.
+
 ## [3.2.1] - 2026-08-31
 
 ### Security
@@ -206,8 +219,9 @@ and this project adheres to [Semantic Versioning](http://semver.org/).
 
 - First release as NuGet package
 
-[Unreleased]: https://github.com/sillsdev/SIL.BuildTasks/compare/v3.2.1...master
+[Unreleased]: https://github.com/sillsdev/SIL.BuildTasks/compare/v3.2.2...master
 
+[3.2.2]: https://github.com/sillsdev/SIL.BuildTasks/compare/v3.2.1...v3.2.2
 [3.2.1]: https://github.com/sillsdev/SIL.BuildTasks/compare/v3.2.0...v3.2.1
 [3.2.0]: https://github.com/sillsdev/SIL.BuildTasks/compare/v3.1.1...v3.2.0
 [3.1.1]: https://github.com/sillsdev/SIL.BuildTasks/compare/v3.1.0...v3.1.1
diff --git a/SIL.BuildTasks/SIL.BuildTasks.csproj b/SIL.BuildTasks/SIL.BuildTasks.csproj
index bb64f505..ba7ed84a 100644
--- a/SIL.BuildTasks/SIL.BuildTasks.csproj
+++ b/SIL.BuildTasks/SIL.BuildTasks.csproj
@@ -13,7 +13,7 @@
     <PackageReference Include="Markdig.Signed" Version="0.41.1" />
     <PackageReference Include="Microsoft.Build.Tasks.Core" Version="18.9.6" />
     <PackageReference Include="Microsoft.Win32.Registry" Version="5.0.0" Condition="'$(TargetFramework)'=='netstandard2.0'" />
-    <PackageReference Include="SIL.Core" Version="17.0.0" />
+    <PackageReference Include="SIL.Core" Version="9.0.0" />
     <PackageReference Include="SIL.ReleaseTasks.Dogfood" Version="[2.3.3-*,)" PrivateAssets="All" />
   </ItemGroup>
   <ItemGroup>