An issue in System.Linq.Dynamic.Core versions before v.1.6.0 allow remote access to properties on reflection types and static properties/fields.
{
"nvd_published_at": "2025-01-21T19:15:10Z",
"cwe_ids": [],
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2025-01-21T22:47:39Z"
}