—Go
GO-2026-5274· CVE-2026-40173, GHSA-95mq-xwj4-r47pDgraph: Unauthenticated admin token disclosure via /debug/pprof/cmdline in github.com/dgraph-io/dgraph
Modified: 8/11/2026
package
Go/github.com/hypermodeinc/dgraph/v24
pkg:go/github.com/hypermodeinc/dgraph/v24
—Go
GO-2026-5516· CVE-2026-41327, GHSA-mrxx-39g5-ph77Pre-Auth DQL injection in upsert condition field in github.com/dgraph-io/dgraph
Modified: 8/11/2026
—Go
GO-2026-5529· CVE-2026-34976, GHSA-p5rh-vmhp-gvcwUnauthenticated restoreTenant mutation allows database overwrite and SSRF in github.com/dgraph-io/dgraph
Modified: 8/11/2026
—Go
GO-2026-5675· CVE-2026-41492, GHSA-vvf7-6rmr-m29qUnauthenticated admin token disclosure via /debug/vars in github.com/dgraph-io/dgraph
Modified: 7/23/2026
—Go
GO-2026-5749· CVE-2026-41328, GHSA-x92x-px7w-4gx4DQL injection via unsanitized NQuad Lang field in github.com/dgraph-io/dgraph
Modified: 7/23/2026
—Go
GO-2026-5837· CVE-2026-44840, GHSA-q2m9-6jp9-c6mcDQL injection via checkUserPassword GraphQL query in github.com/dgraph-io/dgraph
Modified: 7/23/2026