CVE-2020-5234

MessagePack for C# and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow. Review the linked GitHub Security Advisory for more information and remediation steps.

• CWE-121
• CWE-787

• https://github.com/neuecc/MessagePack-CSharp/commit/56fa86219d01d0a183babbbbcb34abbdea588a02Patch, Third Party Advisory
• https://github.com/neuecc/MessagePack-CSharp/commit/f88684078698386df02204f13faeff098a61f007
• https://github.com/neuecc/MessagePack-CSharp/issues/810
• https://github.com/neuecc/MessagePack-CSharp/security/advisories/GHSA-7q36-4xx7-xcxfThird Party Advisory
• https://github.com/neuecc/MessagePack-CSharp/commit/56fa86219d01d0a183babbbbcb34abbdea588a02Patch, Third Party Advisory
• https://github.com/neuecc/MessagePack-CSharp/commit/f88684078698386df02204f13faeff098a61f007
• https://github.com/neuecc/MessagePack-CSharp/issues/810
• https://github.com/neuecc/MessagePack-CSharp/security/advisories/GHSA-7q36-4xx7-xcxfThird Party Advisory

Published

Jan 31, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5228Opencast before 8.1 and 7.6 allows unauthorized public acces…7.5
• CVE-2020-5229Opencast before 8.1 stores passwords using the rather outdat…8.1
• CVE-2020-5230Opencast before 8.1 and 7.6 allows almost arbitrary identifi…7.5
• CVE-2020-5231In Opencast before 7.6 and 8.1, users with the role ROLE_COU…6.5
• CVE-2020-5232A user who owns an ENS domain can set a trapdoor, allowing t…8.7
• CVE-2020-5233OAuth2 Proxy before 5.0 has an open redirect vulnerability. …6.1
• CVE-2020-5235There is a potentially exploitable out of memory condition I…9.8
• CVE-2020-5236Waitress version 1.4.2 allows a DOS attack When waitress rec…6.5
• CVE-2020-5237Multiple relative path traversal vulnerabilities in the oneu…8.8
• CVE-2020-5238The table extension in GitHub Flavored Markdown before versi…6.5
• CVE-2020-5239In Mailu before version 1.7, an authenticated user can explo…8.8
• CVE-2020-5240In wagtail-2fa before 1.4.1, any user with access to the CMS…8.5