Skip to content
OpenAdvisories

Vendor

JasperFx

2 known vulnerabilities.

Products

marten 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-75513

    Marten: SQL injection in Marten's LINQ provider via unescaped string literals

    Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. From version 7.0.0 until 9.13.0, several Marten LINQ and tenant-management paths interpolate runtime, potentially attacker-controlled strings into single-quoted SQL literals without esc…

    JasperFx marten Marten NuGet
  • Critical 9.8
    CVE-2026-45288

    Marten has an SQL injection vulnerability in its full-text search regConfig parameter

    Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. Prior to 8.36.1, Marten's full-text search APIs interpolated the user-supplied regConfig parameter directly into the generated SQL without parameterization or validation, making every c…

    JasperFx marten Marten NuGet