marten vulnerabilities

2 known vulnerabilities in marten from JasperFx. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  marten: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-75513Sep 16, 2026JasperFx

  Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. From version 7.0.0 until 9.13.0, several Marten LINQ and tenant-management paths interpolate runtime, potentially attacker-controlled strings into single-quoted SQL literals without esca

• 9.8 Critical severity

  marten: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-45288May 28, 2026JasperFx

  Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. Prior to 8.36.1, Marten's full-text search APIs interpolated the user-supplied regConfig parameter directly into the generated SQL without parameterization or validation, making every co