Vulnerabilities

TI-2026-30079 CVE-2026-41492 · GHSA-vvf7-6rmr-m29q

Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars in Dgraph

HIGH 82

Dgraph is an open source distributed GraphQL database.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03082 Published 2026-04-24 Fixed in 25.3.3 CWE-200

TI-2026-29928 CVE-2026-41327 · GHSA-mrxx-39g5-ph77

HIGH 78

Dgraph is an open source distributed GraphQL database.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0049 Published 2026-04-24 Fixed in 25.3.3 CWE-943

TI-2026-29929 CVE-2026-41328 · GHSA-x92x-px7w-4gx4

HIGH 80

Dgraph is an open source distributed GraphQL database.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00415 Published 2026-04-24 Fixed in 25.3.3 CWE-943

TI-2026-28987 CVE-2026-40173 · GHSA-95mq-xwj4-r47p

HIGH 82

Dgraph is an open source distributed GraphQL database.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00509 Published 2026-04-15 Fixed in 25.3.2 CWE-200

TI-2026-27198 CVE-2026-34976 · GHSA-p5rh-vmhp-gvcw

HIGH 82

Dgraph is an open source distributed GraphQL database.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02066 Published 2026-04-06 Fixed in 25.3.1 CWE-862

TI-2023-14845 CVE-2023-31135 · GHSA-92wq-q9pq-gw47

LOW 24

Dgraph is an open source distributed GraphQL database.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00153 Published 2023-05-17 Fixed in 23.0.0 CWE-326