VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Jan 31, 2020· Updated Jun 17, 2026

CVE-2020-5234

CVE-2020-5234

Description

MessagePack for C# and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow. Review the linked GitHub Security Advisory for more information and remediation steps.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
MessagePackNuGet
< 1.9.111.9.11
MessagePackNuGet
>= 2.0.0, < 2.1.902.1.90
MessagePack.ImmutableCollectionNuGet
< 1.9.111.9.11
MessagePack.ImmutableCollectionNuGet
>= 2.0.0, < 2.1.902.1.90
MessagePack.ReactivePropertyNuGet
< 1.9.111.9.11
MessagePack.ReactivePropertyNuGet
>= 2.0.0, < 2.1.902.1.90
MessagePack.UnityShimsNuGet
< 1.9.111.9.11
MessagePack.UnityShimsNuGet
>= 2.0.0, < 2.1.902.1.90
MessagePack.UnityNuGet
< 1.9.111.9.11
MessagePack.UnityNuGet
>= 2.0.0, < 2.1.902.1.90

Affected products

6

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.