GHSA-fcpv-w245-r2q7
DotNetNuke.Core security code analysis rules triggered
GHSA-fcpv-w245-r2q7 is a vulnerability with no CVSS score yet in DotNetNuke.Core, published April 14, 2026. No source lists public exploit code. Fixed in DotNetNuke.Core 10.2.2.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
10.2.2DotNetNuke.Core +1 more
Description
The codebase raises code analysis warnings related to security, including CA3075, CA5366, CA5371, CA5368, CA5369, CA5372, CA5379, CA5350, and CA5351.
Most of these deal with disabling DTD processing in XML documents, but also includes cryptographic algorithm choices.
Affected packages
| Package | Affected | Fixed |
|---|---|---|
DotNetNuke.CoreNuGet | 6.0.0 up to 10.2.2 | 10.2.2 |
DotNetNuke.CoreNuGet | 6.0.0 up to 10.2.2, plus listed versions 10.0.010.0.110.1.010.1.110.1.2 Show 45 moreShow less10.2.010.2.17.0.07.0.6.1217.1.07.1.27.2.0.6137.3.0.4997.3.1.207.4.0.3537.4.1.2807.4.2.2168.0.0.8098.0.1.2398.0.2.48.0.3.58.0.4.2269.0.0.10029.0.1.1429.1.0.3679.1.1.1299.10.09.10.19.10.29.11.09.11.19.11.29.12.09.13.09.13.0-ci00009.13.19.13.29.13.39.13.49.13.59.13.5-ci00629.13.69.13.79.13.7-ci00649.13.89.13.99.2.0.3669.2.1.5339.3.09.3.1 | 10.2.2 |
What each source reports
GitHub AdvisoriesNo score
DotNetNuke.Core security code analysis rules triggered
The codebase raises code analysis warnings related to security, including CA3075, CA5366, CA5371, CA5368, CA5369, CA5372, CA5379, CA5350, and CA5351.
Most of these deal with disabling DTD processing in XML documents, but also includes cryptographic algorithm choices.
- Record
GHSA-fcpv-w245-r2q7- Updated
- 2026-11-02
OSVNo score
DotNetNuke.Core security code analysis rules triggered
The codebase raises code analysis warnings related to security, including CA3075, CA5366, CA5371, CA5368, CA5369, CA5372, CA5379, CA5350, and CA5351.
Most of these deal with disabling DTD processing in XML documents, but also includes cryptographic algorithm choices.
- Record
GHSA-fcpv-w245-r2q7- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
Left out here: 15 versions. The JSON record has them.