Skip to content
OpenAdvisories

Package · Go

github.com/dgraph-io/dgraph

8 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.3

    Dgraph Audit Log Encryption nonce reuse

    Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 bytes come from a baseIv which is initialized when an audit log is created. The last 4 bytes come fro…