LuckyPennySoftware vulnerabilities
We track 3 vulnerabilities in LuckyPennySoftware products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
Latest LuckyPennySoftware vulnerabilities
- 7.5 High severity
AutoMapper: Uncontrolled Recursion
AutoMapper is a convention-based object-object mapper in .NET. Prior to 15.1.4 and from 16.0.0 until 16.3.0, AutoMapper increments type depth only after creating the destination, so recursive mapping performed through constructor parameters occurs before MaxDe
- 7.5 High severity
AutoMapper: Uncontrolled Recursion
AutoMapper is a convention-based object-object mapper in .NET. Prior to 15.1.4 and from 16.0.0 until 16.3.0, AutoMapper can recurse without an effective MaxDepth limit when mapping polymorphic graphs through Include or IncludeBase, runtime-typed object or inte
- 7.5 High severity
AutoMapper: Uncontrolled Recursion
AutoMapper is a convention-based object-object mapper in .NET. Versions prior to 15.1.1 and 16.1.1 are vulnerable to a Denial of Service (DoS) attack. When mapping deeply nested object graphs, the library uses recursive method calls without enforcing a default