Skip to main content
cve.nowby Sazabi
← NuGet
NuGetPackage

AutoMapper

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release
16.3.0 (Nov 5, 2026): no advisory affects it
Newest unaffected release
16.3.0 (Nov 5, 2026), the latest release
Advisories
1 · 1 high
Releases
237 since 1.1.0.118 (Sep 7, 2011)
Registry
NuGet
Releases read
Nov 8, 2026

Version timeline

  • CVE-2026-32933
    Affects 1.1.0.118 to 15.1.0 (15.1.1 is outside it); 16.0.0 to 16.1.0 (16.1.1 is outside it)
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

  • AutoMapper Vulnerable to Denial of Service (DoS) via Uncontrolled Recursion

    Affected: from 16.0.0, fixed in 16.1.1; fixed in 15.1.1.

    Fixed in 15.1.1 (released Mar 15, 2026, 5 days before disclosure) and 16.1.1 (released Mar 13, 2026, 7 days before disclosure).

    The latest release, 16.3.0, is not affected.