CVE-2020-36620: 
C# vulnerability analysis and mitigation

A vulnerability was found in Brondahl EnumStringValues up to version 4.0.0, identified as CVE-2020-36620. The issue was related to potential denial of service (DOS) attacks made possible by parsing random invalid enum strings. The vulnerability was fixed with the release of version 4.0.1 on January 2nd (GitHub Release).

The vulnerability existed in the string parsing functionality of the EnumStringValues library. The issue was specifically located in the TryParseStringValueToEnum_ViaCache method within EnumExtensions.cs, where the implementation allowed for potential memory leaks when processing invalid enum strings. The fix involved restructuring the caching mechanism and implementing a more secure approach to handle enum string parsing (GitHub Commit).

The vulnerability could allow attackers to perform denial of service attacks by exploiting the way the library handled invalid enum string parsing, potentially leading to memory resource exhaustion.

Users should upgrade to EnumStringValues version 4.0.1 or later, which contains the fix for this vulnerability. The update implements a more secure caching mechanism that protects against DOS attacks made possible by parsing random invalid enum strings (GitHub Release).