{"items":[{"id":"CVE-2026-61789","published":"2026-10-30T16:08:24.224Z","updated":"2026-11-06T16:25:27.915Z","title":"DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation","severity":"MEDIUM","score":6.1,"vendor":"bytebase","product":"dbhub","kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2022-51026","published":"2026-10-22T19:13:18.259Z","updated":"2026-10-29T02:24:08.646Z","title":"Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login","severity":"CRITICAL","score":9.3,"vendor":"bytebase","product":"bytebase","kev":false,"epss":0.00613,"kevAdded":null},{"id":"CVE-2026-115322","published":"2026-10-22T10:57:41.716Z","updated":"2026-11-05T17:28:19.503Z","title":"Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlers","severity":"MEDIUM","score":5.3,"vendor":"bytebase","product":"bytebase","kev":false,"epss":0.00281,"kevAdded":null},{"id":"CVE-2026-115321","published":"2026-10-22T10:57:40.982Z","updated":"2026-10-23T15:05:29.678Z","title":"Bytebase before 3.16.0 Authorization Bypass via UpdateIssueComment","severity":"MEDIUM","score":5.3,"vendor":"bytebase","product":"bytebase","kev":false,"epss":0.00284,"kevAdded":null},{"id":"CVE-2026-61788","published":"2026-09-24T17:37:40.409Z","updated":"2026-09-29T03:00:45.367Z","title":"@bytebase/dbhub's read-only mode does not prevent database writes","severity":"HIGH","score":7.4,"vendor":"bytebase","product":"dbhub","kev":false,"epss":0.004,"kevAdded":null},{"id":"CVE-2026-61742","published":"2026-09-24T17:30:11.283Z","updated":"2026-09-24T17:42:27.772Z","title":"DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution","severity":"CRITICAL","score":9.3,"vendor":"bytebase","product":"dbhub","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2022-32169","published":"2022-09-28T09:30:23.675Z","updated":"2025-05-21T13:57:27.821Z","title":"bytebase - Improper Authorization","severity":"MEDIUM","score":4.3,"vendor":"bytebase","product":"bytebase","kev":false,"epss":0.00663,"kevAdded":null},{"id":"CVE-2022-32170","published":"2022-09-28T09:30:18.081Z","updated":"2025-05-21T14:05:26.762Z","title":"bytebase - Improper Authorization","severity":"MEDIUM","score":4.3,"vendor":"bytebase","product":"bytebase","kev":false,"epss":0.00663,"kevAdded":null}]}