A vulnerability in DBHub prior to version 0.22.6 allows bypassing read-only SQL validation on the MySQL and MariaDB connectors. This occurs due to incorrect parsing of double-dash comments in SQL statements, enabling an attacker to hide write or destructive commands from validation. The issue does not affect PostgreSQL. The vulnerability is fixed in version 0.22.6.