CVE-2026-75513 is a critical vulnerability in Marten, a .NET Transactional Document DB and Event Store on PostgreSQL. The issue allows for potential SQL injection attacks due to improper handling of runtime strings in LINQ and tenant-management paths. This could lead to filter or multi-tenant authorization bypass and blind data exfiltration. The vulnerability is fixed in version 9.13.0.
Marten, a .NET transactional document database and event store built on PostgreSQL, contains a critical SQL injection vulnerability in versions prior to 8.36.1. The flaw exists in the full-text search APIs where the user-supplied `regConfig` parameter is interpolated directly into generated SQL without parameterization or validation. This makes any code path exposing `regConfig` to untrusted input a SQL i [truncated]
