VDB
KO

GO-2026-5837

Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query in github.com/dgraph-io/dgraph

Details

Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query in github.com/dgraph-io/dgraph

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/dgraph-io/dgraph
Introduced in: 0

No fixed version published yet for github.com/dgraph-io/dgraph (go modules). Pin to a known-safe version or switch to an alternative.

Go / github.com/dgraph-io/dgraph/v24
Introduced in: 0

No fixed version published yet for github.com/dgraph-io/dgraph/v24 (go modules). Pin to a known-safe version or switch to an alternative.

Go / github.com/dgraph-io/dgraph/v25
Introduced in: 0 Fixed in: 25.3.4
Fix go get github.com/dgraph-io/dgraph/v25@v25.3.4

References