Find posts on this blog by CVE ID and product topic.
An index of this blog’s posts. Product labels describe topics discussed; consult the original advisory for affected versions.
AutoMapper is affected by CVE-2026-128082: recursion through constructor parameters can bypass depth limits and terminate the application process. Check direct and transitive packages, then upgrade to 16.3.0 or 15.1.4 for the relevant branch.
AutoMapper is affected by CVE-2026-128081, uncontrolled recursion that can cause a stack overflow and terminate the application process. Versions below 15.1.4 and from 16.0.0 to below 16.3.0 are affected; check packages and upgrade to 15.1.4 or 16.3.0.
Copyright © 2026 ViSafe (visafe.net) · A blog sharing cybersecurity knowledge
BLOG