165 matches found
Dgraph <=v25.3.0 - Admin Mutation Missing Authorization
Dgraph =v25.3.0 contains an authentication bypass caused by missing authorization middleware for the restoreTenant admin mutation, letting unauthenticated attackers overwrite the database, read files, and perform SSRF, exploit requires no authentication. id: CVE-2026-34976 info: name: Dgraph...
Dgraph <= 25.3.2 - Admin Token Disclosure
Dgraph = 25.3.2 contains an information disclosure caused by unauthenticated access to the /debug/vars endpoint , which publishes the cmdline variable including the --security token= flag, letting unauthenticated remote attackers retrieve the admin token and access admin-only endpoints, exploit...
EUVD-2026-42235
Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import...
GO-2020-0017 vulnerabilities
Vulnerabilities for packages: gitness, dgraph, docker-credential-acr-env, docker-credential-acr-env-fips...
GO-2026-5516 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2026-5675 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2020-0005 vulnerabilities
Vulnerabilities for packages: dgraph, etcd-fips, etcd...
GO-2024-2529 vulnerabilities
Vulnerabilities for packages: dgraph, etcd-fips, etcd...
GO-2024-2530 vulnerabilities
Vulnerabilities for packages: dgraph, etcd-fips, juicefs, etcd...
GO-2026-5529 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2026-5274 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2026-5749 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2024-2528 vulnerabilities
Vulnerabilities for packages: dgraph, etcd-fips, etcd...
GO-2025-3372 vulnerabilities
Vulnerabilities for packages: sriov-network-device-plugin-fips, portieris, grafana-mimir, kyverno-notation-aws, step-ca, spark-operator, nfs-subdir-external-provisioner, kubeflow-fips, opa-fips-envoy, opa-fips, sriov-network-device-plugin, opa-envoy, cert-exporter-fips,...
GO-2026-5274 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2026-4514 vulnerabilities
Vulnerabilities for packages: grafana-alloy, weaviate, teleport, vcluster, terragrunt, grafana, lazygit, malcontent, redpanda, terraform-mcp-server, k3s, ollama, witness, prometheus, goreleaser, k8sgpt, cri-tools, rclone, loki, maru, gitlab-runner, dagger, kubevela, nfpm, eksctl, nuclei,...
GO-2026-5675 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2024-2528 vulnerabilities
Vulnerabilities for packages: dgraph...