{"action":"Upgrade @bytebase/dbhub to 0.22.6 or later.","affected":[{"fixed":"0.22.6","introduced":"0"}],"component":"@bytebase/dbhub","cve_ids":["CVE-2026-61788"],"ecosystem":"npm","epss":0.004,"exploited":false,"fixed_versions":["0.22.6"],"ghsa_id":"GHSA-mwwr-p57h-56pf","id":"tcs_01M5KG1ZK04J867TB2M0FHYTK0","modified_at":"2026-09-24T19:45:05.497676189Z","published_at":"2026-09-24T19:37:59Z","references":["https://osv.dev/vulnerability/GHSA-mwwr-p57h-56pf","https://github.com/bytebase/dbhub/security/advisories/GHSA-mwwr-p57h-56pf","https://nvd.nist.gov/vuln/detail/CVE-2026-61788","https://github.com/bytebase/dbhub/pull/342","https://github.com/bytebase/dbhub/commit/872bb338f7d31f6afe517a076ac3e3edafaaaf08","https://github.com/bytebase/dbhub","https://github.com/bytebase/dbhub/releases/tag/v0.22.6"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-mwwr-p57h-56pf","url":"https://osv.dev/vulnerability/GHSA-mwwr-p57h-56pf"}],"summary":"@bytebase/dbhub's read-only mode does not prevent database writes"}