What is GHSA-vq23-hwg7-hxrh?

GHSA-vq23-hwg7-hxrh is a security advisory published by GitHub Security Advisories with Low severity. EnumStringValues vulnerable to Uncontrolled Resource Consumption

Which CVE IDs does GHSA-vq23-hwg7-hxrh cover?

GHSA-vq23-hwg7-hxrh covers the following CVE IDs: CVE-2020-36620. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vq23-hwg7-hxrh?

GHSA-vq23-hwg7-hxrh has a CVSS v3 base score of 3.5, published by GitHub Security Advisories.

Which products are affected by GHSA-vq23-hwg7-hxrh?

GHSA-vq23-hwg7-hxrh affects 1 product, including: nuget/EnumStringValues:\u003c 4.0.2.

GHSA-vq23-hwg7-hxrhLowCVSS 3.5

EnumStringValues vulnerable to Uncontrolled Resource Consumption

Vendor

GitHub Security Advisories

Published

December 21, 2022

Last Modified

January 28, 2023

🔗 CVE IDs covered (1)

CVE-2020-36620 →

📋 Description

A vulnerability was found in Brondahl EnumStringValues 4.0.1. It has been declared as problematic. This vulnerability affects the function GetStringValuesWithPreferences_Uncache of the file EnumStringValues/EnumExtensions.cs. The manipulation leads to resource consumption. Upgrading to version 4.0.2 to address this issue. The name of the patch is c0fc7806beb24883cc2f9543ebc50c0820297307. It is recommended to upgrade the affected component. VDB-216466 is the identifier assigned to this vulnerability.

🎯 Affected products1

nuget/EnumStringValues:< 4.0.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2020-36620
https://github.com/Brondahl/EnumStringValues/commit/c0fc7806beb24883cc2f9543ebc50c0820297307
https://github.com/Brondahl/EnumStringValues/releases/tag/4.0.2
https://vuldb.com/?id.216466
https://github.com/Brondahl/EnumStringValues/releases/tag/4.0.1
https://github.com/advisories/GHSA-vq23-hwg7-hxrh