Vendor

    Bytebase

    8 known vulnerabilities in products by Bytebase, 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Bytebase
    CriticalCVE-2022-51026

    Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login

    also in 1 other product

    		9.8
    CriticalCVE-2026-61742

    DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution

    		—
    HighCVE-2026-61788

    @bytebase/dbhub's read-only mode does not prevent database writes

    		7.4
    MediumCVE-2026-61789

    DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation

    		—
    MediumCVE-2026-115321

    Bytebase before 3.16.0 Authorization Bypass via UpdateIssueComment

    		4.3
    MediumCVE-2026-115322

    Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlers

    		4.3
    MediumCVE-2022-32169

    bytebase - Improper Authorization

    also in 1 other product

    		4.3
    MediumCVE-2022-32170

    bytebase - Improper Authorization

    also in 1 other product

    		4.3

    Products

    Products by Bytebase
    Bytebase50
    Dbhub30