Advisoriesby IbisDgraph Labs (now Hypermode) security advisories
8 advisories across Dgraph
Dgraph Alpha exposes the RPCs used for external snapshot import on the public...CVE-2026-54061no fix yetDQL injection via checkUserPassword GraphQL query in github.com/dgraph-io/dgraphCVE-2026-44840no fix yetDgraph: Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/varsCVE-2026-41492no fix yetDgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang FieldCVE-2026-41328no fix yetDgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition FieldCVE-2026-41327no fix yetDgraph: information disclosureCVE-2026-40173no fix yetDgraph: Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing AuthorizationCVE-2026-34976no fix yetDgraph Audit Log Encryption VulnerabilityCVE-2023-31135fixed in 23.0.0