HIGH7.5
GHSA-pf46-gqg9-j3v3
Insufficient Entropy in DotNetNuke
Quick fix
GHSA-pf46-gqg9-j3v3 — DotNetNuke.Core: upgrade to the fixed version with the command below.
dotnet add package DotNetNuke.Core --version 9.2.2Details
DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy.
Are you affected?
Enter the version of the package you're using.
Affected packages
NuGet/DotNetNuke.Core
Introduced in:
9.2.0Fixed in: 9.2.2Fix
dotnet add package DotNetNuke.Core --version 9.2.2