Skip to content
OpenAdvisories

Product · dgraph-io

dgraph

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-63637

    Dgraph: DQL Injection via unvalidated regexp filter argument in GraphQL query rewriter

    Dgraph is an open source distributed GraphQL database. Prior to 25.3.8, maybeQuoteArg in graphql/resolve/query_rewriter.go passes regexp filter strings into generated DQL without quoting or validating the /pattern/flags form, allowing crafted GraphQL query or…

    dgraph-io dgraph
  • High 7.5
    CVE-2026-44840 Public exploit

    Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query

    Dgraph is an open source distributed GraphQL database. Prior to version 25.3.4, the `checkUserPassword` GraphQL query in Dgraph is vulnerable to DQL (Dgraph Query Language) injection. User-supplied password values are interpolated directly into a DQL `checkpw…

    dgraph-io dgraph github.com/dgraph-io/dgraph/v25 github.com/dgraph-io/dgraph Go