Marten
.NET Transactional Document DB and Event Store on PostgreSQL
Activity
- Latest release
- 3d ago
- Total releases
- 490
- Cadence
- ~daily
- Last 12 months
- 157
Details
- License
- MIT
- First release
- Dec 08, 2015
| Version | Released | |
|---|---|---|
9.54.2
patch
|
9.54.2
patch
Dependencies (6)
|
|
9.54.1
patch
|
9.54.1
patch
Dependencies (6)
|
|
9.54.0
minor
|
9.54.0
minor
Dependencies (6)
|
|
9.53.0
minor
|
9.53.0
minor
Dependencies (6)
|
|
9.52.0
minor
|
9.52.0
minor
Dependencies (6)
|
|
9.51.0
minor
|
9.51.0
minor
Dependencies (6)
|
|
9.50.3
patch
|
9.50.3
patch
Dependencies (6)
|
|
9.50.2
patch
|
9.50.2
patch
Dependencies (6)
|
|
9.50.1
patch
|
9.50.1
patch
Dependencies (6)
|
|
9.50.0
minor
|
9.50.0
minor
Dependencies (6)
|
|
9.49.0
minor
|
9.49.0
minor
Dependencies (6)
|
|
9.48.0
minor
|
9.48.0
minor
Dependencies (6)
|
|
9.47.0
minor
|
9.47.0
minor
Dependencies (6)
|
|
8.38.2
patch
1 CVE
CVE-2026-75513
GHSA-rfx3-98h7-v3xp
Sep 17, 2026
Marten's LINQ provider has SQL injection via unescaped string literals
9.1
/ 10
Critical
Network
Low
Low
None
Changed
High
Low
Low
Several code paths in Marten's LINQ provider and tenant-management internals interpolated a runtime, potentially attacker-influenced value into generated SQL as a single-quoted string literal without escaping or parameterization. A value containing a single quote ( The primary vector is a Affected sinks
Proof of concept (primary vector)Benign: FixEach sink now escapes embedded single quotes ( WorkaroundsUntil upgrading: do not pass untrusted input as a dictionary indexer key / CreditReported privately and responsibly by an external security researcher with an executed PoC. Additional sinks found during the follow-up LINQ-wide audit. Affected versions
7.0.0
7.1.0
7.1.1
7.10.0
7.10.1
7.11.0
7.12.0
7.13.0
7.13.1
7.14.0
7.15.0
7.16.0
+ 195 more Show less
7.17.0
7.17.1
7.18.0
7.19.0
7.19.1
7.2.0
7.20.0
7.20.1
7.20.2
7.21.0
7.21.1
7.22.0
7.23.0
7.23.1
7.24.0
7.25.0
7.25.1
7.25.2
7.26.0
7.26.1
7.26.2
7.26.3
7.26.4
7.26.5
7.26.6
7.27.0
7.28.0
7.28.1
7.28.2
7.29.0
7.3.0
7.3.1
7.30.0
7.30.1
7.30.2
7.30.3
7.31.0
7.31.1
7.31.2
7.31.3
7.32.0
7.33.0
7.33.1
7.33.2
7.33.3
7.34.0
7.34.1
7.35.0
7.35.1
7.35.2
7.35.3
7.36.0
7.37.0
7.37.1
7.37.2
7.37.3
7.38.0
7.38.1
7.39.0
7.39.1
7.39.2
7.39.3
7.39.5
7.39.6
7.4.0
7.40.0
7.40.1
7.40.2
7.40.3
7.40.4
7.40.5
7.5.0
7.6.0
7.7.0
7.8.0
7.9.0
8.0.0
8.0.0-alpha-2
8.0.0-alpha-3
8.0.0-alpha-5
8.0.0-alpha-6-
8.0.0-beta-1
8.0.0-beta-2
8.0.0-rc-1
8.0.0-rc-2
8.0.1
8.1.0
8.1.2
8.10.0
8.10.1
8.11.0
8.12.0
8.13.0
8.13.1
8.13.2
8.13.3
8.14.0
8.15.0
8.15.1
8.15.2
8.15.3
8.15.4
8.16.0
8.16.1
8.16.2
8.16.3
8.16.4
8.17.0
8.18.0
8.18.1
8.18.2
8.18.3
8.19.0
8.2.0
8.2.1
8.20.0
8.21.0
8.22.0
8.22.1
8.22.2
8.23.0
8.24.0
8.25.0
8.26.0
8.26.1
8.26.2
8.27.0
8.28.0
8.29.0
8.29.1
8.29.2
8.29.3
8.3.0
8.3.1
8.3.2
8.3.3
8.30.0
8.30.1
8.31.0
8.32.0
8.32.1
8.33.0
8.34.0
8.34.1
8.34.2
8.35.0
8.36.0
8.37.0
8.37.1
8.37.2
8.37.3
8.37.4
8.38.0
8.38.1
8.4.0
8.5.0
8.6.0
8.7.0
8.8.0
8.8.1
8.8.2
8.9.0
8.9.0-channels-alpha-1
8.9.0-channels-alpha-2
9.0.0
9.0.1
9.0.2
9.10.0
9.11.0
9.12.0
9.2.0
9.2.1
9.3.0
9.3.1
9.3.2
9.3.4
9.3.5
9.4.0
9.5.0
9.5.1
9.5.2
9.5.3
9.6.0
9.7.0
9.7.1
9.7.2
9.7.3
9.7.4
9.7.5
9.7.6
9.8.0
9.8.1
9.8.2
9.9.0
9.9.1
Fixed in
9.13.0
References
Updated Sep 17, 2026 · Source: OSV.dev |
8.38.2
patch
Dependencies (8)
|
|
9.46.0
minor
|
9.46.0
minor
Dependencies (6)
|
|
9.45.0
minor
|
9.45.0
minor
Dependencies (6)
|
|
9.44.0
minor
|
9.44.0
minor
Dependencies (6)
|
|
9.43.0
minor
|
9.43.0
minor
Dependencies (6)
|
|
9.42.0
minor
|
9.42.0
minor
Dependencies (6)
|
|
9.41.0
minor
|
9.41.0
minor
Dependencies (6)
|
|
9.40.0
minor
|
9.40.0
minor
Dependencies (6)
|
|
9.39.1
patch
|
9.39.1
patch
Dependencies (6)
|
|
9.39.0
minor
|
9.39.0
minor
Dependencies (6)
|
|
9.38.0
minor
|
9.38.0
minor
Dependencies (6)
|
|
9.37.0
minor
|
9.37.0
minor
Dependencies (6)
|
|
9.36.0
minor
|
9.36.0
minor
Dependencies (6)
|
|
9.35.0
minor
|
9.35.0
minor
Dependencies (6)
|
|
9.34.0
minor
|
9.34.0
minor
Dependencies (6)
|
|
9.33.0
minor
|
9.33.0
minor
Dependencies (6)
|
|
9.32.1
patch
|
9.32.1
patch
Dependencies (6)
|
|
9.32.0
minor
|
9.32.0
minor
Dependencies (6)
|
|
8.38.1
patch
1 CVE
CVE-2026-75513
GHSA-rfx3-98h7-v3xp
Sep 17, 2026
Marten's LINQ provider has SQL injection via unescaped string literals
9.1
/ 10
Critical
Network
Low
Low
None
Changed
High
Low
Low
Several code paths in Marten's LINQ provider and tenant-management internals interpolated a runtime, potentially attacker-influenced value into generated SQL as a single-quoted string literal without escaping or parameterization. A value containing a single quote ( The primary vector is a Affected sinks
Proof of concept (primary vector)Benign: FixEach sink now escapes embedded single quotes ( WorkaroundsUntil upgrading: do not pass untrusted input as a dictionary indexer key / CreditReported privately and responsibly by an external security researcher with an executed PoC. Additional sinks found during the follow-up LINQ-wide audit. Affected versions
7.0.0
7.1.0
7.1.1
7.10.0
7.10.1
7.11.0
7.12.0
7.13.0
7.13.1
7.14.0
7.15.0
7.16.0
+ 195 more Show less
7.17.0
7.17.1
7.18.0
7.19.0
7.19.1
7.2.0
7.20.0
7.20.1
7.20.2
7.21.0
7.21.1
7.22.0
7.23.0
7.23.1
7.24.0
7.25.0
7.25.1
7.25.2
7.26.0
7.26.1
7.26.2
7.26.3
7.26.4
7.26.5
7.26.6
7.27.0
7.28.0
7.28.1
7.28.2
7.29.0
7.3.0
7.3.1
7.30.0
7.30.1
7.30.2
7.30.3
7.31.0
7.31.1
7.31.2
7.31.3
7.32.0
7.33.0
7.33.1
7.33.2
7.33.3
7.34.0
7.34.1
7.35.0
7.35.1
7.35.2
7.35.3
7.36.0
7.37.0
7.37.1
7.37.2
7.37.3
7.38.0
7.38.1
7.39.0
7.39.1
7.39.2
7.39.3
7.39.5
7.39.6
7.4.0
7.40.0
7.40.1
7.40.2
7.40.3
7.40.4
7.40.5
7.5.0
7.6.0
7.7.0
7.8.0
7.9.0
8.0.0
8.0.0-alpha-2
8.0.0-alpha-3
8.0.0-alpha-5
8.0.0-alpha-6-
8.0.0-beta-1
8.0.0-beta-2
8.0.0-rc-1
8.0.0-rc-2
8.0.1
8.1.0
8.1.2
8.10.0
8.10.1
8.11.0
8.12.0
8.13.0
8.13.1
8.13.2
8.13.3
8.14.0
8.15.0
8.15.1
8.15.2
8.15.3
8.15.4
8.16.0
8.16.1
8.16.2
8.16.3
8.16.4
8.17.0
8.18.0
8.18.1
8.18.2
8.18.3
8.19.0
8.2.0
8.2.1
8.20.0
8.21.0
8.22.0
8.22.1
8.22.2
8.23.0
8.24.0
8.25.0
8.26.0
8.26.1
8.26.2
8.27.0
8.28.0
8.29.0
8.29.1
8.29.2
8.29.3
8.3.0
8.3.1
8.3.2
8.3.3
8.30.0
8.30.1
8.31.0
8.32.0
8.32.1
8.33.0
8.34.0
8.34.1
8.34.2
8.35.0
8.36.0
8.37.0
8.37.1
8.37.2
8.37.3
8.37.4
8.38.0
8.38.1
8.4.0
8.5.0
8.6.0
8.7.0
8.8.0
8.8.1
8.8.2
8.9.0
8.9.0-channels-alpha-1
8.9.0-channels-alpha-2
9.0.0
9.0.1
9.0.2
9.10.0
9.11.0
9.12.0
9.2.0
9.2.1
9.3.0
9.3.1
9.3.2
9.3.4
9.3.5
9.4.0
9.5.0
9.5.1
9.5.2
9.5.3
9.6.0
9.7.0
9.7.1
9.7.2
9.7.3
9.7.4
9.7.5
9.7.6
9.8.0
9.8.1
9.8.2
9.9.0
9.9.1
Fixed in
9.13.0
References
Updated Sep 17, 2026 · Source: OSV.dev |
8.38.1
patch
Dependencies (8)
|
|
9.31.2
patch
|
9.31.2
patch
Dependencies (6)
|
|
9.31.1
patch
|
9.31.1
patch
Dependencies (6)
|
|
9.31.0
minor
|
9.31.0
minor
Dependencies (6)
|
|
8.38.0
minor
1 CVE
CVE-2026-75513
GHSA-rfx3-98h7-v3xp
Sep 17, 2026
Marten's LINQ provider has SQL injection via unescaped string literals
9.1
/ 10
Critical
Network
Low
Low
None
Changed
High
Low
Low
Several code paths in Marten's LINQ provider and tenant-management internals interpolated a runtime, potentially attacker-influenced value into generated SQL as a single-quoted string literal without escaping or parameterization. A value containing a single quote ( The primary vector is a Affected sinks
Proof of concept (primary vector)Benign: FixEach sink now escapes embedded single quotes ( WorkaroundsUntil upgrading: do not pass untrusted input as a dictionary indexer key / CreditReported privately and responsibly by an external security researcher with an executed PoC. Additional sinks found during the follow-up LINQ-wide audit. Affected versions
7.0.0
7.1.0
7.1.1
7.10.0
7.10.1
7.11.0
7.12.0
7.13.0
7.13.1
7.14.0
7.15.0
7.16.0
+ 195 more Show less
7.17.0
7.17.1
7.18.0
7.19.0
7.19.1
7.2.0
7.20.0
7.20.1
7.20.2
7.21.0
7.21.1
7.22.0
7.23.0
7.23.1
7.24.0
7.25.0
7.25.1
7.25.2
7.26.0
7.26.1
7.26.2
7.26.3
7.26.4
7.26.5
7.26.6
7.27.0
7.28.0
7.28.1
7.28.2
7.29.0
7.3.0
7.3.1
7.30.0
7.30.1
7.30.2
7.30.3
7.31.0
7.31.1
7.31.2
7.31.3
7.32.0
7.33.0
7.33.1
7.33.2
7.33.3
7.34.0
7.34.1
7.35.0
7.35.1
7.35.2
7.35.3
7.36.0
7.37.0
7.37.1
7.37.2
7.37.3
7.38.0
7.38.1
7.39.0
7.39.1
7.39.2
7.39.3
7.39.5
7.39.6
7.4.0
7.40.0
7.40.1
7.40.2
7.40.3
7.40.4
7.40.5
7.5.0
7.6.0
7.7.0
7.8.0
7.9.0
8.0.0
8.0.0-alpha-2
8.0.0-alpha-3
8.0.0-alpha-5
8.0.0-alpha-6-
8.0.0-beta-1
8.0.0-beta-2
8.0.0-rc-1
8.0.0-rc-2
8.0.1
8.1.0
8.1.2
8.10.0
8.10.1
8.11.0
8.12.0
8.13.0
8.13.1
8.13.2
8.13.3
8.14.0
8.15.0
8.15.1
8.15.2
8.15.3
8.15.4
8.16.0
8.16.1
8.16.2
8.16.3
8.16.4
8.17.0
8.18.0
8.18.1
8.18.2
8.18.3
8.19.0
8.2.0
8.2.1
8.20.0
8.21.0
8.22.0
8.22.1
8.22.2
8.23.0
8.24.0
8.25.0
8.26.0
8.26.1
8.26.2
8.27.0
8.28.0
8.29.0
8.29.1
8.29.2
8.29.3
8.3.0
8.3.1
8.3.2
8.3.3
8.30.0
8.30.1
8.31.0
8.32.0
8.32.1
8.33.0
8.34.0
8.34.1
8.34.2
8.35.0
8.36.0
8.37.0
8.37.1
8.37.2
8.37.3
8.37.4
8.38.0
8.38.1
8.4.0
8.5.0
8.6.0
8.7.0
8.8.0
8.8.1
8.8.2
8.9.0
8.9.0-channels-alpha-1
8.9.0-channels-alpha-2
9.0.0
9.0.1
9.0.2
9.10.0
9.11.0
9.12.0
9.2.0
9.2.1
9.3.0
9.3.1
9.3.2
9.3.4
9.3.5
9.4.0
9.5.0
9.5.1
9.5.2
9.5.3
9.6.0
9.7.0
9.7.1
9.7.2
9.7.3
9.7.4
9.7.5
9.7.6
9.8.0
9.8.1
9.8.2
9.9.0
9.9.1
Fixed in
9.13.0
References
Updated Sep 17, 2026 · Source: OSV.dev |
8.38.0
minor
Dependencies (8)
|
|
9.30.0
minor
|
9.30.0
minor
Dependencies (6)
|
|
9.29.0
minor
|
9.29.0
minor
Dependencies (6)
|
|
9.28.0
minor
|
9.28.0
minor
Dependencies (6)
|
|
9.27.0
minor
|
9.27.0
minor
Dependencies (6)
|
|
9.26.0
minor
|
9.26.0
minor
Dependencies (6)
|
|
9.25.0
minor
|
9.25.0
minor
Dependencies (6)
|
|
9.24.0
minor
|
9.24.0
minor
Dependencies (6)
|
|
9.23.0
minor
|
9.23.0
minor
Dependencies (6)
|
|
9.22.6
patch
|
9.22.6
patch
Dependencies (6)
|
|
9.22.5
patch
|
9.22.5
patch
Dependencies (6)
|
|
9.22.4
patch
|
9.22.4
patch
Dependencies (6)
|
|
9.22.3
patch
|
9.22.3
patch
Dependencies (6)
|
|
9.22.2
patch
|
9.22.2
patch
Dependencies (6)
|
|
9.22.1
patch
|
9.22.1
patch
Dependencies (6)
|