cve.bz

luckypennysoftware automapper vulnerabilities, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 7.5CVE-2026-128082

    AutoMapper is a convention-based object-object mapper in .NET. Prior to 15.1.4 and from 16.0.0 until 16.3.0, AutoMapper increments type depth only after creating the destination, so recursive mapping performed through constructor parameter…

  2. 7.5CVE-2026-128081

    AutoMapper is a convention-based object-object mapper in .NET. Prior to 15.1.4 and from 16.0.0 until 16.3.0, AutoMapper can recurse without an effective MaxDepth limit when mapping polymorphic graphs through Include or IncludeBase, runtime…

  3. 7.5CVE-2026-32933EPSS 0.6%

    AutoMapper is a convention-based object-object mapper in .NET. Versions prior to 15.1.1 and 16.1.1 are vulnerable to a Denial of Service (DoS) attack. When mapping deeply nested object graphs, the library uses recursive method calls withou…