All products

@bytebase/dbhub

npm · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validationCVE-2026-61789 · GHSA-J656-3HF2-FVJC @bytebase/dbhub npm Medium Fix reported
@bytebase/dbhub's read-only mode does not prevent database writesCVE-2026-61788 · GHSA-MWWR-P57H-56PF @bytebase/dbhub npm High Fix reported
DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL executionCVE-2026-61742 · GHSA-FM8P-53WW-HF6W @bytebase/dbhub npm Critical Fix reported