Dgraph
Dgraph-IO · 9 CVEs
Dgraph: DQL Injection via unvalidated regexp filter argument in GraphQL query rewriter
Aug 6, 2026
Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query
Jul 8, 2026
Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import
Jul 8, 2026
Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars in Dgraph
Apr 24, 2026
Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field
Apr 24, 2026
Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field
Apr 24, 2026
Dgraph: Unauthenticated pprof endpoint leaks admin auth token
Apr 15, 2026
Dgraph Affected by Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization
Apr 6, 2026
Dgraph Audit Log Encryption nonce reuse
May 17, 2023
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-63637 | Dgraph: DQL Injection via unvalidated regexp filter argument in GraphQL query rewriter | HIGH | 0.41% | Aug 6, 2026 |
| CVE-2026-44840 | Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query | HIGH | 0.49% | Jul 8, 2026 |
| CVE-2026-54061 | Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import | CRITICAL | 0.58% | Jul 8, 2026 |
| CVE-2026-41492 | Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars in Dgraph | CRITICAL | 2.46% | Apr 24, 2026 |
| CVE-2026-41327 | Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field | CRITICAL | 0.47% | Apr 24, 2026 |
| CVE-2026-41328 | Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field | CRITICAL | 0.48% | Apr 24, 2026 |
| CVE-2026-40173 | Dgraph: Unauthenticated pprof endpoint leaks admin auth token | CRITICAL | 0.60% | Apr 15, 2026 |
| CVE-2026-34976 | Dgraph Affected by Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization | CRITICAL | 1.65% | Apr 6, 2026 |
| CVE-2023-31135 | Dgraph Audit Log Encryption nonce reuse | MEDIUM | 0.15% | May 17, 2023 |
Showing 1 to 9 of 9 CVEs