DotNetNuke.Core security code analysis rules triggered
Date: 2026-04
Affected: nuget/DotNetNuke.Core
Attack vector: other
Category: vulnerability-disclosure
Severity: Low

The codebase raises code analysis warnings related to security, including CA3075, CA5366, CA5371, CA5368, CA5369, CA5372, CA5379, CA5350, and CA5351. Most of these deal with disabling DTD processing in XML documents, but also includes cryptographic algorithm choices.


Mitigations:

Architectural layers (MAESTRO):