Security
فارسی
All products

github.com/dgraph-io/dgraph/v25

Go · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of ServiceCVE-2026-102748 · GHSA-QJ98-GP63-54XJ github.com/dgraph-io/dgraph/v25 Go Critical Fix reported
Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang FieldCVE-2026-41328 · GHSA-X92X-PX7W-4GX4Version ranges need review. github.com/dgraph-io/dgraph/v24github.com/dgraph-io/dgraph/v25 Go Critical Fix reported
Dgraph: Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/varsCVE-2026-41492 · GHSA-VVF7-6RMR-M29QVersion ranges need review. github.com/dgraph-io/dgraph/v24github.com/dgraph-io/dgraph/v25 Go Critical Fix reported
Dgraph: Unauthenticated /debug/pprof/cmdline discloses admin auth token, enabling unauthorized access to protected Alpha admin endpointsCVE-2026-40173 · GHSA-95MQ-XWJ4-R47PVersion ranges need review. github.com/dgraph-io/dgraph/v24github.com/dgraph-io/dgraph/v25 Go Critical Fix reported
Dgraph Alpha group stores can be replaced via unauthenticated external snapshot importCVE-2026-54061 · GHSA-RRWH-6JRQ-WP5VVersion ranges need review. github.com/dgraph-io/dgraph/v25github.com/dgraph-io/dgraph Go Critical Fix reported
Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition FieldCVE-2026-41327 · GHSA-MRXX-39G5-PH77Version ranges need review. github.com/dgraph-io/dgraph/v24github.com/dgraph-io/dgraph/v25 Go Critical Fix reported
Dgraph: Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing AuthorizationCVE-2026-34976 · GHSA-P5RH-VMHP-GVCWVersion ranges need review. github.com/dgraph-io/dgraph/v24github.com/dgraph-io/dgraph/v25 Go Critical Fix reported
Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL QueryCVE-2026-44840 · GHSA-Q2M9-6JP9-C6MCVersion ranges need review. github.com/dgraph-io/dgraph/v25github.com/dgraph-io/dgraph Go High Fix reported