165 matches found
Dgraph <=v25.3.0 - Admin Mutation Missing Authorization
Dgraph =v25.3.0 contains an authentication bypass caused by missing authorization middleware for the restoreTenant admin mutation, letting unauthenticated attackers overwrite the database, read files, and perform SSRF, exploit requires no authentication. id: CVE-2026-34976 info: name: Dgraph...
Dgraph <= 25.3.2 - Admin Token Disclosure
Dgraph = 25.3.2 contains an information disclosure caused by unauthenticated access to the /debug/vars endpoint , which publishes the cmdline variable including the --security token= flag, letting unauthenticated remote attackers retrieve the admin token and access admin-only endpoints, exploit...
EUVD-2026-42235
Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import...
GO-2024-2529 vulnerabilities
Vulnerabilities for packages: dgraph, etcd-fips, etcd...
GO-2020-0017 vulnerabilities
Vulnerabilities for packages: dgraph, docker-credential-acr-env-fips, gitness, docker-credential-acr-env...
GO-2020-0005 vulnerabilities
Vulnerabilities for packages: dgraph, etcd-fips, etcd...
GO-2026-5675 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2026-5516 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2026-5529 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2024-2530 vulnerabilities
Vulnerabilities for packages: dgraph, etcd-fips, juicefs, etcd...
GO-2026-5749 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2024-2528 vulnerabilities
Vulnerabilities for packages: dgraph, etcd-fips, etcd...
GO-2026-5274 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2025-3372 vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler-fips, google-osconfig-agent, step-fips, sigstore-scaffolding-fips, pulumi-kubernetes-operator, skaffold, spark-operator-fips, step-ca-fips, step-issuer, crossplane-provider-gcp, kyverno-notation-aws, cluster-proportional-autoscaler,...
GO-2026-4514 vulnerabilities
Vulnerabilities for packages: lazygit, gitlab-runner, malcontent, tempo, vcluster, teleport, k8sgpt, nuclei, terragrunt, redpanda, opentelemetry-collector-contrib, datadog-agent, terraform-mcp-server, rclone, witness, dgraph, opentelemetry-collector, kubevela, ollama, eksctl, grafana, nfpm,...
GO-2026-5274 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2026-5675 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2026-5749 vulnerabilities
Vulnerabilities for packages: dgraph...