Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
AutoMapper is a convention-based object-object mapper in .NET. Versions prior to 15.1.1 and 16.1.1 are vulnerable to a Denial of Service (DoS) attack. When mapping deeply nested object graphs, the library uses recursive method calls without enforcing a default maximum depth limit. This allows an attacker to provide a specially crafted object graph that exhausts the thread's stack memory, triggering a `StackOverflowException` and causing the entire application process to terminate. Versions 15.1.1 and 16.1.1 fix the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-32933 AutoMapper Denial of Service via Recursive Object Graph Mapping Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-32933
Post summary
The post presents CVE-2026-32933 as a Denial of Service in AutoMapper caused by recursive mapping, but offers no PoC, exploit details, or patch information, merely linking to a vulnerability database.
CVE-2026-32933 AutoMapper is a convention-based object-object mapper in .NET. Versions prior to 15.1.1 and 16.1.1 are vulnerable to a Denial of Service (DoS) attack. When mapping de… https://www.cve.org/CVERecord?id=CVE-2026-32933
Post summary
The tweet announces CVE-2026-32933, a DoS vulnerability in AutoMapper versions prior to 15.1.1 and 16.1.1, without providing a PoC, exploit, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | luckypennysoftware | automapper | - | - | - |