bytebase vulnerabilities
CVEs whose affected-version data names the bytebase package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-115322Medium· 4.3Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlers
Bytebase before 3.16.0 contains an authorization bypass vulnerability in GetTaskRunLog, GetTaskRunSession and PreviewTaskRunRollback that allows authenticated users to access other projects' task runs by UID. Attackers with permission on…
▾ Sunlitbytebase · bytebasevia CVEORG
CVE-2026-115321Medium· 4.3Bytebase before 3.16.0 Authorization Bypass via UpdateIssueComment
Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that allows low-privileged project users to modify comments in other projects by supplying a foreign comment UID. Attackers with any …
▾ Sunlitbytebase · bytebasevia CVEORG