Skip to content
OpenAdvisories

Package · Go

github.com/dgraph-io/dgraph

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-44840 Public exploit

    Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query

    Dgraph is an open source distributed GraphQL database. Prior to version 25.3.4, the `checkUserPassword` GraphQL query in Dgraph is vulnerable to DQL (Dgraph Query Language) injection. User-supplied password values are interpolated directly into a DQL `checkpw…

    dgraph-io dgraph github.com/dgraph-io/dgraph/v25 github.com/dgraph-io/dgraph Go