Skip to content
OpenAdvisories

Vendor

bytebase

8 known vulnerabilities.

Products

bytebase 5 dbhub 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-61788

    @bytebase/dbhub's read-only mode does not prevent database writes

    DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to version 0.22.6, setting `readonly = true` on the `execute_sql` tool does not make the connection read-only. The connectors are written to set PostgreSQL `default…

    bytebase dbhub @bytebase/dbhub npm