npm/@bytebase/dbhub CVE-2026-61789: medium, EPSS 0.39%
DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation
Action: Upgrade @bytebase/dbhub to 0.22.6 or later.
npm i @bytebase/dbhub@0.22.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.22.6 | - |
Fixed versions
| 0.22.6 |
Sources
- osv: GHSA-j656-3hf2-fvjc
- https://github.com/bytebase/dbhub/security/advisories/GHSA-j656-3hf2-fvjc
- https://github.com/bytebase/dbhub/pull/342
- https://github.com/bytebase/dbhub/commit/872bb338f7d31f6afe517a076ac3e3edafaaaf08
- https://github.com/bytebase/dbhub
- https://github.com/bytebase/dbhub/releases/tag/v0.22.6
CVE-2026-61789 · published · modified · JSON