Dgraph <=v25.3.0 - Admin Mutation Missing Authorization

Dgraph =v25.3.0 contains an authentication bypass caused by missing authorization middleware for the restoreTenant admin mutation, letting unauthenticated attackers overwrite the database, read files, and perform SSRF, exploit requires no authentication. id: CVE-2026-34976 info: name: Dgraph...

Dgraph <= 25.3.2 - Admin Token Disclosure

Dgraph = 25.3.2 contains an information disclosure caused by unauthenticated access to the /debug/vars endpoint , which publishes the cmdline variable including the --security token= flag, letting unauthenticated remote attackers retrieve the admin token and access admin-only endpoints, exploit...

EUVD-2026-42235

Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import...

GO-2020-0017 vulnerabilities

Vulnerabilities for packages: gitness, dgraph, docker-credential-acr-env, docker-credential-acr-env-fips...

GO-2026-5516 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2026-5675 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2020-0005 vulnerabilities

Vulnerabilities for packages: dgraph, etcd-fips, etcd...

GO-2024-2529 vulnerabilities

Vulnerabilities for packages: dgraph, etcd-fips, etcd...

GO-2024-2530 vulnerabilities

Vulnerabilities for packages: dgraph, etcd-fips, juicefs, etcd...

GO-2026-5529 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2026-5274 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2026-5749 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2024-2528 vulnerabilities

Vulnerabilities for packages: dgraph, etcd-fips, etcd...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin-fips, portieris, grafana-mimir, kyverno-notation-aws, step-ca, spark-operator, nfs-subdir-external-provisioner, kubeflow-fips, opa-fips-envoy, opa-fips, sriov-network-device-plugin, opa-envoy, cert-exporter-fips,...

GO-2026-5274 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: grafana-alloy, weaviate, teleport, vcluster, terragrunt, grafana, lazygit, malcontent, redpanda, terraform-mcp-server, k3s, ollama, witness, prometheus, goreleaser, k8sgpt, cri-tools, rclone, loki, maru, gitlab-runner, dagger, kubevela, nfpm, eksctl, nuclei,...

GO-2026-5675 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2024-2528 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2024-2530 vulnerabilities

Vulnerabilities for packages: dgraph, juicefs...

GO-2026-5749 vulnerabilities

Vulnerabilities for packages: dgraph...