—
GO-2026-5749
Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field in github.com/dgraph-io/dgraph
Details
Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field in github.com/dgraph-io/dgraph
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/dgraph-io/dgraph
Introduced in:
0 No fixed version published yet for github.com/dgraph-io/dgraph (go modules). Pin to a known-safe version or switch to an alternative.
Go / github.com/dgraph-io/dgraph/v24
Introduced in:
0 No fixed version published yet for github.com/dgraph-io/dgraph/v24 (go modules). Pin to a known-safe version or switch to an alternative.
Go / github.com/dgraph-io/dgraph/v25
Introduced in:
0 Fixed in: 25.3.3 Fix
go get github.com/dgraph-io/dgraph/v25@v25.3.3