NuGetPackage

Marten

2 known vulnerabilities (2 critical), with the versions each affects and the releases that fix them.

Latest release: 9.58.0 (Nov 5, 2026): no advisory affects it
Newest unaffected release: 9.58.0 (Nov 5, 2026), the latest release
Advisories: 2 · 2 critical

Releases: 500+ since 0.5.0.9 (Dec 8, 2015)
Registry: NuGet
Releases read: Nov 8, 2026

Version timeline

CVE-2026-75513
Affects 7.0.0 to 9.13.0-alpha.4 (9.13.0 is outside it)
CVE-2026-45288
Affects 0.5.0.9 to 8.36.0 (8.37.0 is outside it)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects. Older releases aren't stored, so the earliest spans may start sooner.

Advisories 2

CVE-2026-75513Critical 9.1
Marten: SQL injection in Marten's LINQ provider via unescaped string literals
Affected: from 7.0.0, fixed in 9.13.0.
Fixed in 9.13.0 (released Jul 8, 2026, 70 days before disclosure).
The latest release, 9.58.0, is not affected.
CVE-2026-45288Critical 9.8
Marten has an SQL injection vulnerability in its full-text search regConfig parameter
Affected: fixed in 8.37.0.
Fixed in 8.37.0 (released May 9, 2026, 19 days before disclosure).
The latest release, 9.58.0, is not affected.