GHSA-6VHM-J9H7-F9GH AutoMapper: Uncontrolled Recursion with Constructor Parameters

Summary MaxDepth, whether set explicitly or applied by default 64 to self-referential type maps, was not enforced when the recursion goes through constructor parameters. Mapping a deeply nested source to a destination built through its constructor, such as a positional record, recurses without...