github.com/hypermodeinc/dgraph/v24 vulnerabilities (Go)

6 vulnerabilities.

• github.com/hypermodeinc/dgraph/v24 Go Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query CVE-2026-44840 Public exploitFix available 7.5 HighJune 29, 2026
• github.com/hypermodeinc/dgraph/v24 Go Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars in Dgraph CVE-2026-41492 Fix available 9.8 CriticalApril 24, 2026
• github.com/hypermodeinc/dgraph/v24 Go Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field CVE-2026-41328 Fix available 9.1 CriticalApril 24, 2026
• github.com/hypermodeinc/dgraph/v24 Go Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field CVE-2026-41327 Fix available 9.1 CriticalApril 24, 2026
• github.com/hypermodeinc/dgraph/v24 Go Dgraph: Unauthenticated pprof endpoint leaks admin auth token CVE-2026-40173 Fix available 9.4 CriticalApril 15, 2026
• github.com/hypermodeinc/dgraph/v24 Go Dgraph Affected by Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization CVE-2026-34976 Fix available 10.0 CriticalApril 2, 2026