Threats affecting pkg:github/jasperfx/marten

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.4%	CVE-2026-45288JasperFx marten · SQL Injection Critical9.8EPSS 0.4%2026-05-28CVE Database V5CVE-2026-45288 CVE-2026-45288 is a critical SQL injection vulnerability in JasperFx Marten versions prior to 8.36.1. The issue arises because the full-text search APIs interpolate the user-supplied regConfig parameter directly into SQL queries without proper parameterization or validation. This allows attackers to inject malicious SQL commands via untrusted input. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. A fix is available in version 8.36.1. EPSS 0.4%Vulnerability CWE-89	CVE Database V5	2026-05-28

Page 1 of 1