AutoMapper 16.3.0
Stack overflow patched
AutoMapper 16.3.0 and 15.1.4 Close MaxDepth Gaps Behind DoS Bugs
Jimmy Bogard shipped AutoMapper 16.3.0 and 15.1.4, both fixing two security issues, so anyone on 16.x or 15.x should upgrade. The default MaxDepth limit added in March turned out to be bypassable through constructor-built destinations and several other recursion paths, letting deeply nested self-referential graphs crash the process with an uncatchable StackOverflowException.