Vulnerability GHSA-gpwp-5797-mjff

High Risk

6 hours ago

AutoMapper: Denial of Service via uncontrolled recursion that bypasses MaxDepth

1.1.0.118 and 1.1.1 - 2.0.0 and 2.1.1 and 2.1.262 and 2.1.265 - 2.2.1-ci10 and 2.2.1-ci1000 and 2.2.1-ci11 and 2.2.1-ci15 and 2.2.1-ci16 and 2.2.1-ci17 and 2.2.1-ci4 and 2.2.1-ci5 and 2.2.1-ci6 and 2.2.1-ci7 and 2.2.1-ci8 and 2.2.1-ci9 and 2.2.1-ci9000 and 2.2.1-ci9001 and 2.2.1-ci9002 and 2.2.1-ci9003 and 2.2.1-ci9004 and 2.2.1-ci9005 and 2.2.1-ci9006 and 2.2.1 and 2.2.24-ci - 3.0.0-ci1026 and 3.0.0-ci1028 and 3.0.0-ci1029 and 3.0.0-ci1031 and 3.0.0-ci1032 and 3.0.0-ci1033 and 3.0.0-ci1034 and 3.0.0-ci1035 and 3.0.0-ci1036 and 3.0.0-ci1037 and 3.0.0-ci1038 and 3.0.0-ci1039 and 3.0.0-ci1040 and 3.0.0-ci1041 and 3.0.0-ci1042 and 3.0.0-ci1043 and 3.0.0-ci1053 and 3.0.0 - 3.1.0-ci1014 and 3.1.0-ci1016 and 3.1.0-ci1017 and 3.1.0-ci1018 and 3.1.0-ci1019 and 3.1.0-ci1020 and 3.1.0-ci1021 and 3.1.0-ci1022 and 3.1.0-ci1023 and 3.1.0-ci1024 and 3.1.0-ci1026 and 3.1.0-ci1027 and 3.1.0-ci1032 and 3.1.0-ci1033 and 3.1.0-ci1034 and 3.1.0-ci1035 and 3.1.0-ci1036 and 3.1.0-ci1037 and 3.1.0-ci1038 and 3.1.0-ci1043 and 3.1.0-ci1044 and 3.1.0-ci1045 and 3.1.0-ci1046 and 3.1.0-ci1047 and 3.1.0-ci1048 and 3.1.0-ci1049 and 3.1.0-ci1050 and 3.1.0-ci1051 and 3.1.0-ci1053 and 3.1.0-ci1056 and 3.1.0-ci1058 and 3.1.0 - 3.1.1-ci1000 and 3.1.1-ci1003 and 3.1.1 - 3.2.0-ci1000 and 3.2.0-ci1001 and 3.2.0-ci1002 and 3.2.0-ci1003 and 3.2.0-ci1004 and 3.2.0-ci1005 and 3.2.0-ci1008 and 3.2.0-ci1009 and 3.2.0-ci1010 and 3.2.0-ci1011 and 3.2.0-ci1014 and 3.2.0-ci1015 and 3.2.0-ci1016 and 3.2.0-ci1017 and 3.2.0-ci1021 and 3.2.0-ci1022 and 3.2.0-ci1023 and 3.2.0-ci1024 and 3.2.0-ci1025 and 3.2.0-ci1026 and 3.2.0-ci1027 and 3.2.0-ci1028 and 3.2.0-ci1029 and 3.2.0-ci1030 and 3.2.0-ci1033 and 3.2.0-ci1034 and 3.2.0-ci1035 and 3.2.0-ci1036 and 3.2.0-ci1037 and 3.2.0-ci1038 and 3.2.0-ci1039 and 3.2.0-ci1040 and 3.2.0-ci1041 and 3.2.0-ci1042 and 3.2.0-ci1043 and 3.2.0 - 3.2.1-ci1000 and 3.2.1-ci1001 and 3.2.1-ci1002 and 3.2.1 - 3.3.0-ci1000 and 3.3.0-ci1001 and 3.3.0-ci1002 and 3.3.0-ci1003 and 3.3.0-ci1004 and 3.3.0-ci1005 and 3.3.0-ci1006 and 3.3.0-ci1007 and 3.3.0-ci1008 and 3.3.0-ci1009 and 3.3.0-ci1016 and 3.3.0-ci1017 and 3.3.0-ci1018 and 3.3.0-ci1019 and 3.3.0-ci1020 and 3.3.0-ci1021 and 3.3.0-ci1022 and 3.3.0-ci1023 and 3.3.0-ci1024 and 3.3.0-ci1025 and 3.3.0-ci1026 and 3.3.0-ci1027 and 3.3.0-ci1028 and 3.3.0-ci1029 and 3.3.0-ci1030 and 3.3.0-ci1031 and 3.3.0-ci1032 and 3.3.0-ci1033 and 3.3.0 - 4.0.0-alpha1 and 4.0.0-ci1002 and 4.0.0-ci1004 and 4.0.0-ci1006 and 4.0.0-ci1007 and 4.0.0-ci1014 and 4.0.0-ci1015 and 4.0.0-ci1017 and 4.0.0-ci1018 and 4.0.0-ci1019 and 4.0.0-ci1020 and 4.0.0-ci1021 and 4.0.0-ci1026 and 4.0.0-ci1031 and 4.0.0-ci1032 and 4.0.0-ci1034 and 4.0.0-ci1036 and 4.0.0-ci1038 and 4.0.0-ci1046 and 4.0.0-ci1049 and 4.0.0-ci1050 and 4.0.0-ci1051 and 4.0.0-ci1052 and 4.0.0-ci1053 and 4.0.0-ci1054 and 4.0.0-ci1056 and 4.0.0-ci1057 and 4.0.0-ci1061 and 4.0.0 - 5.0.0-beta-1 and 5.0.0 - 7.0.0-alpha-0001 and 7.0.0 - 16.2.0

Summary

AutoMapper: Denial of Service via uncontrolled recursion that bypasses MaxDepth

Details

Summary

The default and explicit MaxDepth limits added for CVE-2026-32933 don't apply to several mapping paths. Mapping a deeply nested source through any of them recurses without bound and throws a StackOverflowException, which can't be caught and terminates the process.

Affected paths

Polymorphic maps: derived type maps (Include / IncludeBase) didn't inherit the base map's MaxDepth, and the default limit for self-referential maps was only applied to the base map. A chain of derived objects was mapped without a limit, even with MaxDepth set on the base map.
Runtime-typed members: members typed as object or an interface aren't seen by self-reference detection, so the default limit isn't applied.
Dictionary and dynamic sources: mapping a nested Dictionary<string, object> or ExpandoObject (for example, deserialized JSON) onto typed destinations recurses with no depth tracking. MaxDepth has no effect.
Recursive type converters: ConvertUsing that calls context.Mapper.Map ignores MaxDepth.

Impact

An application that maps attacker-influenced, deeply nested data through one of these paths can be crashed. On a 1 MB stack (the Windows default), a few thousand levels of nesting are enough.

Fix

Derived type maps inherit MaxDepth, and the default limit is applied to them.
Every runtime map call checks for sufficient stack, and fails with a catchable InsufficientExecutionStackException instead of overflowing.

Workarounds

Set MaxDepth explicitly on derived maps and on maps reached through object or interface members. There is no configuration workaround for dictionary or dynamic sources, or for recursive type converters, other than limiting input depth before mapping.

CVE-2026-32933 (GHSA-rvv3-g6hj-g44x)
GHSA-6vhm-j9h7-f9gh: MaxDepth not enforced through constructor parameters and positional records, fixed in the same releases.