{"data":{"id":"c8b7c5e1-b721-45b3-b0aa-d88639156ddf","title":"GHSA-j656-3hf2-fvjc: DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation","summary":"DBHub's read-only mode can be bypassed on its MySQL and MariaDB connectors. The SQL parser treats \"--\" as a comment even when MySQL and MariaDB would not, so a payload such as \"SELECT 1--1;DROP TABLE victim\" passes the read-only check while the database executes the DROP TABLE, which allows writes and DDL when a database is exposed to an AI agent. The advisory states that PostgreSQL is not affected by this path.","solution":"The source suggests running only the validated statements instead of the original string and disabling multipleStatements on the MySQL and MariaDB connections unless it is required. As defense in depth, it suggests making the comment scanner dialect-aware so that for MySQL and MariaDB \"--\" starts a comment only when followed by whitespace, a control character, or the end of the line.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-j656-3hf2-fvjc","publishedAt":"2026-11-02T17:57:51.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@bytebase/dbhub@< 0.22.6 (fixed: 0.22.6)"],"affectedPackageNames":["@bytebase/dbhub"],"affectedPackageRefs":["npm:@bytebase/dbhub"],"affectedVendors":[],"affectedVendorsRaw":["DBHub"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-j656-3hf2-fvjc"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-11-02T17:57:51.000Z","fixReleasedAt":"2026-06-24T07:34:34.189Z","daysToFix":-131,"fixCheckedAt":"2026-11-02T18:06:06.532Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@bytebase/dbhub","fixedVersion":"0.22.6","matchedVersion":"0.22.6","fixReleasedAt":"2026-06-24T07:34:34.189Z","daysToFix":-131,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-11-02T18:06:06.528Z"}]}}