GO-2026-5529 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2024-2528 vulnerabilities

Vulnerabilities for packages: etcd-fips, dgraph, etcd...

GO-2026-5274 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2026-5749 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin-fips, caddy-fips, flyte, kyverno-notation-aws, portieris-fips, opa, pulumi-language-yaml, spark-operator, crossplane-provider-gcp, step-issuer, pulumi-kubernetes-operator, pulumi-language-dotnet, cert-exporter, terraform-provider-google,...

GO-2026-5274 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2026-5675 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: dagger, eksctl, maru, teleport, nfpm, goreleaser, malcontent, k8sgpt, k3s, lazygit, nuclei, tempo, opentelemetry-collector-contrib, kubevela, mcp-grafana, ollama, prometheus, loki, terragrunt, dgraph, datadog-agent, grafana, cri-tools, terraform-mcp-server, weaviate,...

GO-2024-2528 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2024-2530 vulnerabilities

Vulnerabilities for packages: dgraph, juicefs...

GO-2020-0017 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, dgraph, gitness...

GO-2026-5749 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2020-0005 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2024-2529 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2026-5529 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2026-5516 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2023-2153 vulnerabilities

Vulnerabilities for packages: kubevela, k3d, cortex, scorecard, aactl, src, buildkitd, slsa-verifier, kubeflow, dgraph, kubescape, up, terraform-provider-sendgrid, spark-operator...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: delve, tkn, nginx-prometheus-exporter, cerbos, aws-application-networking-k8s, helm-set-status, nuclei, cloud-provider-vsphere, ratify, bom, yunikorn-k8shim, rancher-system-upgrade-controller, ipfs-cluster, harbor-registry, opa, envconsul, trivy, kind, nri-apache, ko...

GO-2026-5529 Unauthenticated restoreTenant mutation allows database overwrite and SSRF in github.com/dgraph-io/dgraph

The restoreTenant GraphQL mutation in Dgraph was missing from the admin mutation middleware configuration. This omission bypassed all authentication, IP whitelisting, and audit logging for this mutation. An unauthenticated remote attacker could use this mutation to trigger a database restore from...

GO-2026-5274 Dgraph: Unauthenticated admin token disclosure via /debug/pprof/cmdline in github.com/dgraph-io/dgraph

The /debug/pprof/cmdline endpoint in Dgraph Alpha discloses the command-line arguments used to start the process, which may include the administrator's authentication token if provided via the --authtoken flag. This allows an unauthenticated remote attacker to obtain the token and gain full...