Skip to content
OpenAdvisories

Vendor

bytebase

8 known vulnerabilities.

Products

bytebase 5 dbhub 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-51026

    Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login

    Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-supplied GitLab provider configuration in the POST /api/auth/login/GITLAB_SELF_HOST e…

    bytebase bytebase github.com/bytebase/bytebase Go
  • Critical 9.3
    CVE-2026-61742

    DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution

    DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Versions prior to 0.22.5 expose an unauthenticated HTTP MCP endpoint when started with the documented HTTP transport mode, for example `--transport http --port 8080`. The…

    bytebase dbhub @bytebase/dbhub npm