v15.1.2

Warning

This release was built from the wrong branch and is deprecated. The v15.1.2 tag was created on main instead of release/15.x, so this package contains 16.x code: it targets net10.0/net471 and depends on Microsoft.Extensions.* 10.0.0. See #4620.

• For 15.x, use 15.1.3 or later, which contains the 15.x backport of the GHSA-rvv3-g6hj-g44x fix.
• If you need net10.0/net471 targets or 16.x APIs, upgrade to 16.x instead.

This version has been unlisted and deprecated on NuGet. Existing restores of this exact version still work.

What's Changed

• docs: Document duplicate license message behavior and fixes by @Copilot in #4617

Security

Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.

Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.

Users should upgrade to this release.

Security advisory: GHSA-rvv3-g6hj-g44x

Thanks to @skdishansachin for responsibly disclosing this issue.

Full Changelog: v16.1.1...v15.1.2