AutoMapper stack overflow vulnerability: check affected versions and upgrade to a fixed release
AutoMapper is affected by CVE-2026-128082: recursion through constructor parameters can bypass depth limits and terminate the application process. Check direct and transitive packages, then upgrade to 16.3.0 or 15.1.4 for the relevant branch.