Skip to content
OpenAdvisories

Product · bytebase

dbhub

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-61789

    DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation

    DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to 0.22.6, read-only SQL validation can be bypassed on the MySQL and MariaDB connectors. In `src/utils/sql-parser.ts`, `scanSingleLineComment` treats every double d…

    bytebase dbhub @bytebase/dbhub npm