npm - OSV

GHSA-mwwr-p57h-56pf

npm/@bytebase/dbhub

@bytebase/dbhub's read-only mode does not prevent database writes 24 Sep

Fix available
Severity - 7.4 (High)

GHSA-fm8p-53ww-hf6w

npm/@bytebase/dbhub

DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution 24 Sep

Fix available
Severity - 9.3 (Critical)