What happened

Two advisories in the last two weeks have the same shape.

DBHub, which exposes databases to AI agents ( GHSA-j656-3hf2-fvjc , fixed in 0.22.6). Read-only mode is the control operators use to let an assistant read a database without changing it. DBHub split the SQL, checked each statement, then sent the original string to MySQL or MariaDB with multipleStatements: true . Its parser treats -- as the start of a comment. MySQL and MariaDB only do when whitespace, a control character or the end of the line follows:

SELECT 1 --1;DROP TABLE victim

Enter fullscreen mode

Exit fullscreen mode

DBHub saw one SELECT and passed the check. The database ran SELECT 1 - -1 and then dropped the table. The advisory names the realistic path: prompt injection in content the assistant reads.

LangGraph ( GHSA-4hm6-w6qq-w73v / CVE-2026-118668, fixed in langgraph-api 0.15.0). A JavaScript or TypeScript Store authorization handler rewrote the requested namespace to restrict each user to their own data.…