Download Latest Version
v15.1.3 source code.tar.gz (1.6 MB)
Get an email when there's a new version of AutoMapper
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-03-17 | 764 Bytes | |
| v15.1.3 source code.tar.gz | 2026-03-17 | 1.6 MB | |
| v15.1.3 source code.zip | 2026-03-17 | 1.9 MB | |
| Totals: 3 Items | 3.6 MB | 2 | |
What's Changed
- Fix GHSA-rvv3-g6hj-g44x: default MaxDepth of 64 for self-referential types (15.x backport) by @jbogard in https://github.com/LuckyPennySoftware/AutoMapper/pull/4619
Security
Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.
Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.
Users should upgrade to this release.
Security advisory: GHSA-rvv3-g6hj-g44x
Thanks to @skdishansachin for responsibly disclosing this issue.
Full Changelog: https://github.com/LuckyPennySoftware/AutoMapper/compare/v15.1.0...v15.1.3
