170 matches found
CVE-2026-34976
CVE-2026-34976 affects Dgraph prior to 25.3.1 where the restoreTenant admin mutation is missing from the authorization middleware, allowing an unauthenticated attacker to specify attacker-controlled backup locations (including file://), S3/MinIO credentials, encryption key paths, and Vault IDs. T...
Dgraph 安全漏洞
Dgraph is an open-source, horizontally scalable distributed GraphQL database with a graphical backend. Versions of Dgraph prior to 25.3.1 contained a security vulnerability. This vulnerability stemmed from a flaw in the restoreTenant management mechanism, which lacked an authorization middleware...
CVE-2026-34976 vulnerabilities
Vulnerabilities for packages: dgraph...
GHSA-P5RH-VMHP-GVCW vulnerabilities
Vulnerabilities for packages: dgraph...
CVE-2026-34976 vulnerabilities
Vulnerabilities for packages: dgraph...
GHSA-P5RH-VMHP-GVCW vulnerabilities
Vulnerabilities for packages: dgraph...
CVE-2026-32285 vulnerabilities
Vulnerabilities for packages: terragrunt, opentelemetry-collector, dgraph, redpanda, lazygit, cri-tools, tempo, witness, ollama, mcp-grafana, vcluster, maru, k8sgpt, malcontent, goreleaser, grafana-alloy, loki, rclone, eksctl, k3s, weaviate, opentelemetry-collector-contrib, teleport, grafana,...
GHSA-FW7P-63QQ-7HPR vulnerabilities
Vulnerabilities for packages: spicedb, terragrunt, dgraph, flux-kustomize-controller, tkn, aactl, argo-workflows, kubeflow-pipelines, step-kms-plugin, mariadb-operator, kyverno-policy-reporter, temporal, nuclei, witness, crossplane-provider-sql, rekor, ksops, wolfictl, cerbos, trufflehog, age,...
CVE-2020-15112 vulnerabilities
Vulnerabilities for packages: dgraph...
GHSA-M332-53R6-2W93 vulnerabilities
Vulnerabilities for packages: dgraph...
CVE-2020-15112 vulnerabilities
Vulnerabilities for packages: dgraph, etcd-fips, etcd...
GHSA-M332-53R6-2W93 vulnerabilities
Vulnerabilities for packages: dgraph, etcd-fips, etcd...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: k8sgpt-operator, stern, kubernetes-csi-driver-nfs, podman, cluster-api-aws-controller, rekor, kserve-modelmesh-serving, gke-gcloud-auth-plugin, nri-consul, sriov-network-device-plugin, go-jsonnet, pulumi-kubernetes-operator, newrelic-infrastructure-agent, harbor,...
EUVD-2023-1505
Malicious code in bioql PyPI...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: tigera-operator, dive, docker-cli-buildx, kubeflow-katib, cluster-api-provider-vsphere, grafana-rollout-operator, cg, gatekeeper, kube-logging-operator, hubble, kapp, dragonfly-operator, spire-controller-manager, nodetaint, blob-csi, kubernetes-dashboard-web,...
CVE-2023-31135
Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 bytes come from a baseIv which is initialized when an audit log is created. The last 4 bytes come from the length of the log line being...
CVE-2024-24788 vulnerabilities
Vulnerabilities for packages: tigera-operator, dive, cert-manager-webhook-pdns, hubble-ui-backend-fips, kube-state-metrics, shfmt, melange, kubernetes-dashboard-metrics-scraper, falcosidekick, prometheus-pushgateway, prometheus-mysqld-exporter, vt-cli, frp, helm-fips, tigera-operator-fips,...
GHSA-VJG6-93FV-QV64 vulnerabilities
Vulnerabilities for packages: dgraph, etcd-fips, etcd, juicefs...