dgraph-io dgraph
10 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-102748 | < 25.4.0 | Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service | CRITICAL 9.2 | 0.5 % | ||
| CVE-2026-63637 | < 25.3.8 | Dgraph: DQL Injection via unvalidated regexp filter argument in GraphQL query rewriter | HIGH 8.6 | 0.4 % | ||
| CVE-2026-44840 | < 25.3.4 | Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query | HIGH 7.5 | 0.5 % | ||
| CVE-2026-54061 | < 25.3.5 | Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-41492 | < 25.3.3 | Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars in Dgraph | CRITICAL 9.8 | 3.1 % | ||
| CVE-2026-41327 | < 25.3.3 | Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-41328 | < 25.3.3 | Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field | CRITICAL 9.1 | 0.4 % | ||
| CVE-2026-40173 | < 25.3.2 | Dgraph: Unauthenticated pprof endpoint leaks admin auth token | CRITICAL 9.4 | 0.5 % | ||
| CVE-2026-34976 | < 25.3.1 | Dgraph Affected by Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization | CRITICAL 10.0 | 2.1 % | ||
| CVE-2023-31135 | < 23.0.0 | Dgraph Audit Log Encryption nonce reuse | MEDIUM 5.5 | 0.2 % |