CVE-2026-32933 vulnerabilities

Vulnerabilities for packages: promitor...

CVE-2026-32933

AutoMapper is a convention-based object-object mapper in .NET. Versions prior to 15.1.1 and 16.1.1 are vulnerable to a Denial of Service DoS attack. When mapping deeply nested object graphs, the library uses recursive method calls without enforcing a default maximum depth limit. This allows an...

CVE-2026-32933

AutoMapper (a .NET object-object mapper) is vulnerable in versions prior to 15.1.1 and 16.1.1 to a Denial of Service via uncontrolled recursion during deep object graph mapping, which can exhaust thread stack memory and trigger a StackOverflowException, terminating the process. The issue is mitig...

CVE-2026-32933

creationtimestamp| type| source ---|---|--- 2026-03-13 15:35:18+00:00| published-proof-of-concept| https://github.com/LuckyPennySoftware/AutoMapper/security/advisories/GHSA-rvv3-g6hj-g44x 2026-03-22 00:01:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmaikzdtv2v...