Dgraph

6 CVEs across 1 Dgraph products. Browse Dgraph vulnerabilities, severities, and proof-of-concept exploits.

Dgraph products with known CVEs

ProductCVEs
Dgraph6
Dgraph CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-41492Critical9.82026-04-24Dgraph is an open source distributed GraphQL database. Prior to 25.3.3, Dgraphl exposes the process command line through the unauthenticated /debug/vars endpoi…
CVE-2026-41328Critical9.12026-04-24Dgraph is an open source distributed GraphQL database. Prior to 25.3.3, a vulnerability has been found in Dgraph that gives an unauthenticated attacker full re…
CVE-2026-41327Critical9.12026-04-24Dgraph is an open source distributed GraphQL database. Prior to 25.3.3, a vulnerability has been found in Dgraph that gives an unauthenticated attacker full re…
CVE-2026-40173Critical9.42026-04-15Dgraph is an open source distributed GraphQL database. Versions 25.3.1 and prior contain an unauthenticated credential disclosure vulnerability where the /debu…
CVE-2026-34976Critical10.02026-04-06Dgraph is an open source distributed GraphQL database. Prior to 25.3.1, the restoreTenant admin mutation is missing from the authorization middleware config (a…
CVE-2023-31135Low3.32023-05-17Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 b…