Skip to content
Bbytebase
Products
| Product | CVEs | Exploited | Latest |
| bytebase | 5 | – | Oct 22, 2026 |
| dbhub | 3 | – | Oct 30, 2026 |
Exploited and recent CVEs
-
CVE-2026-61789
Medium 6.1
DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation
0.4%
-
CVE-2022-51026
Critical 9.8
Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login
0.6%
-
CVE-2026-115322
Medium 4.3
Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlers
0.3%
-
CVE-2026-115321
Medium 4.3
Bytebase before 3.16.0 Authorization Bypass via UpdateIssueComment
0.3%
-
CVE-2026-61788
High 7.4
@bytebase/dbhub's read-only mode does not prevent database writes
0.4%
-
CVE-2026-61742
Critical 9.3
DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution
0.2%
-
CVE-2022-32169
Medium 4.3
bytebase - Improper Authorization
0.7%
-
CVE-2022-32170
Medium 4.3
bytebase - Improper Authorization
0.7%