Skip to content
OpenAdvisories
High · 8.0 CVE-2026-85965 EUVD-2026-97557GHSA-9mf9-3w9j-j23g

Use-after-free in Progress MarkLogic Server JavaScript engine integration

Published Oct 12, 2026 · Updated Oct 15, 2026 · Assigned by ProgressSoftware

Description

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instability.

Affected products

VendorProductAffectedFixed
Progress Software MarkLogic Server 11.0.0 – < 11.3.7, 12.0.0 – < 12.1.0 11.3.7

References