{"schema":"vulnpedia.research/1","cve":"CVE-2022-51026","references":[{"url":"https://github.com/bytebase/bytebase/security/advisories/GHSA-5r3p-6rj5-7937","tags":["vendor-advisory","WEB"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:18.259Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:18.259Z","url":"https://github.com/bytebase/bytebase/security/advisories/GHSA-5r3p-6rj5-7937"},{"source":"nvd","sourceId":"CVE-2022-51026","modified":"2026-10-23T19:57:42.660","url":"https://github.com/bytebase/bytebase/security/advisories/GHSA-5r3p-6rj5-7937"},{"source":"ghsa","sourceId":"GHSA-5r3p-6rj5-7937","url":"https://github.com/bytebase/bytebase/security/advisories/GHSA-5r3p-6rj5-7937"},{"source":"ghsa","sourceId":"GHSA-5r3p-6rj5-7937","modified":"2026-10-23T10:55:57.079312361Z","url":"https://github.com/bytebase/bytebase/security/advisories/GHSA-5r3p-6rj5-7937"}]},{"url":"https://github.com/bytebase/bytebase/commit/d69e682243b25b51dd52912a26e2f259b5f3db2d","tags":["patch"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:18.259Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:18.259Z","url":"https://github.com/bytebase/bytebase/commit/d69e682243b25b51dd52912a26e2f259b5f3db2d"},{"source":"nvd","sourceId":"CVE-2022-51026","modified":"2026-10-23T19:57:42.660","url":"https://github.com/bytebase/bytebase/commit/d69e682243b25b51dd52912a26e2f259b5f3db2d"}]},{"url":"https://github.com/bytebase/bytebase/pull/834","tags":["patch","issue-tracking"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:18.259Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:18.259Z","url":"https://github.com/bytebase/bytebase/pull/834"},{"source":"nvd","sourceId":"CVE-2022-51026","modified":"2026-10-23T19:57:42.660","url":"https://github.com/bytebase/bytebase/pull/834"}]},{"url":"https://github.com/bytebase/bytebase/blob/1.0.0/server/auth.go#L79-L93","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:18.259Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:18.259Z","url":"https://github.com/bytebase/bytebase/blob/1.0.0/server/auth.go#L79-L93"},{"source":"nvd","sourceId":"CVE-2022-51026","modified":"2026-10-23T19:57:42.660","url":"https://github.com/bytebase/bytebase/blob/1.0.0/server/auth.go#L79-L93"}]},{"url":"https://github.com/bytebase/bytebase/releases/tag/1.0.1","tags":["release-notes"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:18.259Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:18.259Z","url":"https://github.com/bytebase/bytebase/releases/tag/1.0.1"},{"source":"nvd","sourceId":"CVE-2022-51026","modified":"2026-10-23T19:57:42.660","url":"https://github.com/bytebase/bytebase/releases/tag/1.0.1"}]},{"url":"https://github.com/bytebase/bytebase","tags":["product","PACKAGE"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:18.259Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:18.259Z","url":"https://github.com/bytebase/bytebase"},{"source":"nvd","sourceId":"CVE-2022-51026","modified":"2026-10-23T19:57:42.660","url":"https://github.com/bytebase/bytebase"},{"source":"ghsa","sourceId":"GHSA-5r3p-6rj5-7937","url":"https://github.com/bytebase/bytebase"},{"source":"ghsa","sourceId":"GHSA-5r3p-6rj5-7937","modified":"2026-10-23T10:55:57.079312361Z","url":"https://github.com/bytebase/bytebase"}]},{"url":"https://www.vulncheck.com/advisories/bytebase-0.12.0-before-1.0.1-authentication-bypass-via-gitlab-self-hosted-login","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:18.259Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:18.259Z","url":"https://www.vulncheck.com/advisories/bytebase-0.12.0-before-1.0.1-authentication-bypass-via-gitlab-self-hosted-login"},{"source":"nvd","sourceId":"CVE-2022-51026","modified":"2026-10-23T19:57:42.660","url":"https://www.vulncheck.com/advisories/bytebase-0.12.0-before-1.0.1-authentication-bypass-via-gitlab-self-hosted-login"}]},{"url":"https://osv.dev/vulnerability/GHSA-5r3p-6rj5-7937","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-5r3p-6rj5-7937","modified":"2026-10-23T10:55:57.079312361Z","origins":[{"source":"ghsa","sourceId":"GHSA-5r3p-6rj5-7937","url":"https://osv.dev/vulnerability/GHSA-5r3p-6rj5-7937"},{"source":"ghsa","sourceId":"GHSA-5r3p-6rj5-7937","modified":"2026-10-23T10:55:57.079312361Z","url":"https://osv.dev/vulnerability/GHSA-5r3p-6rj5-7937"}]},{"url":"https://github.com/bytebase/bytebase/commit/a578ed58e478ba5c2dadf8d538ec5c3d39c28461","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-5r3p-6rj5-7937","modified":"2026-10-23T10:55:57.079312361Z","origins":[{"source":"ghsa","sourceId":"GHSA-5r3p-6rj5-7937","url":"https://github.com/bytebase/bytebase/commit/a578ed58e478ba5c2dadf8d538ec5c3d39c28461"},{"source":"ghsa","sourceId":"GHSA-5r3p-6rj5-7937","modified":"2026-10-23T10:55:57.079312361Z","url":"https://github.com/bytebase/bytebase/commit/a578ed58e478ba5c2dadf8d538ec5c3d39c28461"}]},{"source":"euvd","sourceId":"EUVD-2022-56076","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-56076","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2022-56076","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-56076"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-5r3p-6rj5-7937","url":"https://osv.dev/vulnerability/GHSA-5r3p-6rj5-7937","ecosystem":"Go","name":"github.com/bytebase/bytebase","purl":"pkg:golang/github.com/bytebase/bytebase","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.0.1"}]}],"databaseSpecific":{"last_known_affected_version_range":"<= 1.0.0","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-5r3p-6rj5-7937/GHSA-5r3p-6rj5-7937.json"},"modified":"2026-10-23T10:55:57.079312361Z","origins":[{"source":"ghsa","sourceId":"GHSA-5r3p-6rj5-7937","modified":"2026-10-23T10:55:57.079312361Z","url":"https://osv.dev/vulnerability/GHSA-5r3p-6rj5-7937"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}