DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation
npm @bytebase/dbhub · Upgrade to 0.22.6 or later · < 0.22.6 · CVE-2026-61789 · GHSA-j656-3hf2-fvjc · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
1–2 of 2 matching · newest first
npm @bytebase/dbhub · Upgrade to 0.22.6 or later · < 0.22.6 · CVE-2026-61789 · GHSA-j656-3hf2-fvjc · amended
crates.io arrow-data · Upgrade to 60.1.0, 59.3.2, 58.4.1 or 57.3.2 by release line · >= 33.0.0, < 57.3.2; >= 58.0.0, < 58.4.1; >= 59.0.0, < 59.3.2; >= 60.0.0, < 60.1.0 · CVE-2026-111959 · GHSA-gqmm-qrjq-4c7h
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.