165 matches found
Dgraph <=v25.3.0 - Admin Mutation Missing Authorization
Dgraph =v25.3.0 contains an authentication bypass caused by missing authorization middleware for the restoreTenant admin mutation, letting unauthenticated attackers overwrite the database, read files, and perform SSRF, exploit requires no authentication. id: CVE-2026-34976 info: name: Dgraph...
Dgraph <= 25.3.2 - Admin Token Disclosure
Dgraph = 25.3.2 contains an information disclosure caused by unauthenticated access to the /debug/vars endpoint , which publishes the cmdline variable including the --security token= flag, letting unauthenticated remote attackers retrieve the admin token and access admin-only endpoints, exploit...
EUVD-2026-42235
Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import...
GO-2026-5675 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2026-5516 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2024-2529 vulnerabilities
Vulnerabilities for packages: etcd, dgraph, etcd-fips...
GO-2020-0017 vulnerabilities
Vulnerabilities for packages: docker-credential-acr-env-fips, dgraph, gitness, docker-credential-acr-env...
GO-2020-0005 vulnerabilities
Vulnerabilities for packages: etcd, dgraph, etcd-fips...
GO-2026-5529 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2024-2530 vulnerabilities
Vulnerabilities for packages: etcd, juicefs, dgraph, etcd-fips...
GO-2024-2528 vulnerabilities
Vulnerabilities for packages: etcd, dgraph, etcd-fips...
GO-2026-5749 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2026-5274 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2025-3372 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, cert-exporter, kube-bench-fips, kyverno-fips, step-ca-fips, crossplane-provider-gcp, nfs-subdir-external-provisioner-fips, smarter-device-manager, step-issuer-fips, sriov-network-device-plugin, kyverno-notation-aws-fips, kubeflow,...
GO-2026-5675 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2026-5274 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2026-4514 vulnerabilities
Vulnerabilities for packages: goreleaser, k8sgpt, k3s, opentelemetry-collector-contrib, dagger, redpanda, dgraph, witness, kubevela, terraform-mcp-server, grafana, lazygit, malcontent, cri-tools, terragrunt, weaviate, maru, opentelemetry-collector, nuclei, minio, gitlab-runner, tempo, prometheus,...
GO-2024-2530 vulnerabilities
Vulnerabilities for packages: juicefs, dgraph...