bytebase

Products

ProductCVEsExploitedLatest
bytebase5–Oct 22, 2026
dbhub3–Oct 30, 2026

Exploited and recent CVEs

  • CVE-2026-61789 Medium 6.1 DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation 0.4%
  • CVE-2022-51026 Critical 9.8 Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login 0.6%
  • CVE-2026-115322 Medium 4.3 Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlers 0.3%
  • CVE-2026-115321 Medium 4.3 Bytebase before 3.16.0 Authorization Bypass via UpdateIssueComment 0.3%
  • CVE-2026-61788 High 7.4 @bytebase/dbhub's read-only mode does not prevent database writes 0.4%
  • CVE-2026-61742 Critical 9.3 DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution 0.2%
  • CVE-2022-32169 Medium 4.3 bytebase - Improper Authorization 0.7%
  • CVE-2022-32170 Medium 4.3 bytebase - Improper Authorization 0.7%