CVE-2026-61742
1 advisory.
npm/@bytebase/dbhub CVE-2026-61742: critical
DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution
Action: Upgrade @bytebase/dbhub to 0.22.5 or later.
npm i @bytebase/dbhub@0.22.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.22.5 | - |
Fixed versions
| 0.22.5 |
Sources
- osv: GHSA-fm8p-53ww-hf6w
- https://github.com/bytebase/dbhub/security/advisories/GHSA-fm8p-53ww-hf6w
- https://nvd.nist.gov/vuln/detail/CVE-2026-61742
- https://github.com/bytebase/dbhub/pull/340
- https://github.com/bytebase/dbhub/commit/5bf5c3242a22e94871dfdf53913c84a5025b7381
- https://github.com/bytebase/dbhub
- https://github.com/bytebase/dbhub/releases/tag/v0.22.6
CVE-2026-61742 · published · modified · JSON