Microsoft was aware of this issue at least 1 year ago. I know this because they released a special code analysis rule CA2101 [1] that explicitly discouraged the

Microsoft was aware of this issue at least 1 year ago. I know this because they released a special code analysis rule CA2101 [1] that explicitly discouraged the use of the best-fit mapping. They mentioned security vulnerabilities in the rule’s description, but they were purposefully vague in details though. [1] https://learn.microsoft.com/en-us/dotnet/fundamentals/code-analysis/quality-rules/ca2101 https://learn.microsoft.com/en-us/dotnet/fundamentals/code-a...