@bytebase/dbhub vulnerabilities (npm)

3 vulnerabilities.

• @bytebase/dbhub npm DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation CVE-2026-61789 Fix available 6.1 MediumOctober 30, 2026
• @bytebase/dbhub npm @bytebase/dbhub's read-only mode does not prevent database writes CVE-2026-61788 Fix available 7.4 HighSeptember 24, 2026
• @bytebase/dbhub npm DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution CVE-2026-61742 Fix available 9.3 CriticalSeptember 24, 2026