An issue in System.Linq.Dynamic.Core versions before v.1.6.0 allow remote access to properties on reflection types and static properties/fields.
{
"github_reviewed": true,
"cwe_ids": [],
"github_reviewed_at": "2025-01-21T22:47:39Z",
"nvd_published_at": "2025-01-21T19:15:10Z",
"severity": "HIGH"
}