BY
Vendor
bytebase
7
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-51026 New | BY bytebase bytebase | 9.8 | Oct 22 | Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login |
| CVE-2026-115322 New | BY bytebase bytebase | 4.3 | Oct 22 | Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlers |
| CVE-2026-115321 New | BY bytebase bytebase | 4.3 | Oct 22 | Bytebase before 3.16.0 Authorization Bypass via UpdateIssueComment |
| CVE-2026-61788 | DB dbhub bytebase | 7.4 | Sep 24 | @bytebase/dbhub's read-only mode does not prevent database writes |
| CVE-2026-61742 | DB dbhub bytebase | 9.3 | Sep 24 | DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution |
| CVE-2022-32170 | BY Bytebase Bytebase | 4.3 | Sep 28 | The “Bytebase” application does not restrict low privilege user to access admin “projects“ for which an unauthorized user can view the “projects“ created by “Admin” and the… |
| CVE-2022-32169 | BY Bytebase Bytebase | 4.3 | Sep 28 | The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user can view the “OPEN” and “CLOSED” issues by “Admin” and the… |