Dgraph Labs (now Hypermode) security advisories
8 advisories across Dgraph
| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Aug 25 | Dgraph Alpha exposes the RPCs used for external snapshot import on the public... Critical9.1Aug 25 | Critical9.1 | No fix yet |
| Jul 7 | DQL injection via checkUserPassword GraphQL query in github.com/dgraph-io/dgraphHigh7.5Jul 7 | High7.5 | No fix yet |
| Apr 24 | Dgraph: Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/varsCritical9.8Apr 24 | Critical9.8 | No fix yet |
| Apr 24 | Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang FieldCritical9.1Apr 24 | Critical9.1 | No fix yet |
| Apr 24 | Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition FieldCritical9.1Apr 24 | Critical9.1 | No fix yet |
| Apr 16 | Dgraph: information disclosureCritical9.4Apr 16 | Critical9.4 | No fix yet |
| Apr 2 | Dgraph: Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing AuthorizationCritical10.0Apr 2 | Critical10.0 | No fix yet |
| May 172023 | Dgraph Audit Log Encryption VulnerabilityMedium5.5May 17, 2023 | Medium5.5 | 23.0.0 |