Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Bytebase CVE-2026-61789
DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to 0.22.6, read-only SQL validation can be bypassed on the MySQL
0 CVEs and 0 credit lines.
-
Bytebase CVE-2026-115322
Bytebase before 3.16.0 contains an authorization bypass vulnerability in GetTaskRunLog, GetTaskRunSession and PreviewTaskRunRollback that allows authenticated u
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit -
Bytebase CVE-2026-115321
Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that allows low-privileged project users to modify comme
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit