CVE Browser

Page 1

Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars in Dgraph

Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field

Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field

Dgraph: Unauthenticated pprof endpoint leaks admin auth token

Dgraph Affected by Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization

Dgraph Audit Log Encryption nonce reuse

CVE ID	Description	Severity	CVSS	EPSS	Ecosystems	Published
CVE-2026-41492	Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars in Dgraph	CRITICAL	9.8	2.46%	Go	Apr 24, 2026
CVE-2026-41327	Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field	CRITICAL	9.1	0.47%	Go	Apr 24, 2026
CVE-2026-41328	Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field	CRITICAL	9.1	0.48%	Go	Apr 24, 2026
CVE-2026-40173	Dgraph: Unauthenticated pprof endpoint leaks admin auth token	CRITICAL	9.4	0.60%	Go	Apr 15, 2026
CVE-2026-34976	Dgraph Affected by Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization	CRITICAL	10.0	1.65%	Go	Apr 6, 2026
CVE-2023-31135	Dgraph Audit Log Encryption nonce reuse	MEDIUM	5.5	0.15%	Go	May 17, 2023

Rows per page

Showing 1 to 6 CVEs · page 1