The DataSet and DataTable types are legacy .NET components that you can use to represent data sets as managed objects.

While DataSet and DataTable do impose default limitations on the types that are allowed to be present while deserializing XML payloads, DataSet and DataTable are in general not safe when populated with untrusted input.

Please visit DataSet and DataTable security guidance for more details.

Please review the DataSet and DataTable security guidance before making use of these types for serialization.
  • Microsoft DocsDataSet and DataTable security guidance.
    •