CVE-2026-61789

DBHub, a database MCP server, contains a vulnerability in its MySQL and MariaDB connectors prior to version 0.22.6 . The root cause is an interpretation conflict in src/utils/sql-parser.ts, where scanSingleLineComment incorrectly treats every double dash (--) as a comment start, unlike the actual...