An issue in System.Linq.Dynamic.Core versions before v.1.6.0 allow remote access to properties on reflection types and static properties/fields.
{ "github_reviewed": true, "nvd_published_at": "2025-01-21T19:15:10Z", "severity": "HIGH", "cwe_ids": [], "github_reviewed_at": "2025-01-21T22:47:39Z" }