VDB
Sign up
LOW

GHSA-fcpv-w245-r2q7

DotNetNuke.Core security code analysis rules triggered

Quick fix

GHSA-fcpv-w245-r2q7 — DotNetNuke.Core: upgrade to the fixed version with the command below.

dotnet add package DotNetNuke.Core --version 10.2.2

Details

The codebase raises code analysis warnings related to security, including CA3075, CA5366, CA5371, CA5368, CA5369, CA5372, CA5379, CA5350, and CA5351.

Most of these deal with disabling DTD processing in XML documents, but also includes cryptographic algorithm choices.

Are you affected?

Enter the version of the package you're using.

Affected packages

NuGet/DotNetNuke.Core
Introduced in: 6.0.0Fixed in: 10.2.2
Fixdotnet add package DotNetNuke.Core --version 10.2.2

References