AutoMapper: Denial of Service via uncontrolled recursion that bypasses MaxDepth

Summary The default and explicit MaxDepth limits added for CVE-2026-32933 don't apply to several mapping paths. Mapping a deeply nested source through any of them recurses without bound and throws a StackOverflowException, which can't be caught and terminates the process. Affected paths -...

GHSA-GPWP-5797-MJFF AutoMapper: Denial of Service via uncontrolled recursion that bypasses MaxDepth

Summary The default and explicit MaxDepth limits added for CVE-2026-32933 don't apply to several mapping paths. Mapping a deeply nested source through any of them recurses without bound and throws a StackOverflowException, which can't be caught and terminates the process. Affected paths -...