github.com/dgraph-io/dgraph/v25 vulnerabilities (Go)
8 vulnerabilities.
-
github.com/dgraph-io/dgraph/v25Go Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service 9.2 Critical -
github.com/dgraph-io/dgraph/v25Go Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import 9.1 Critical -
github.com/dgraph-io/dgraph/v25Go Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query 7.5 High -
github.com/dgraph-io/dgraph/v25Go Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars in Dgraph 9.8 Critical -
github.com/dgraph-io/dgraph/v25Go Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field 9.1 Critical -
github.com/dgraph-io/dgraph/v25Go Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field 9.1 Critical -
github.com/dgraph-io/dgraph/v25Go Dgraph: Unauthenticated pprof endpoint leaks admin auth token 9.4 Critical -
github.com/dgraph-io/dgraph/v25Go Dgraph Affected by Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization 10.0 Critical