PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/dgraph-io/dgraph/v25 Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service Critical 9.5 6 hours ago 6 hours ago
github.com/dgraph-io/dgraph/v25 Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field Critical 9.1 5 months ago 1 month ago
github.com/dgraph-io/dgraph/v25 Dgraph: Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars Critical 9.8 5 months ago 1 month ago
github.com/dgraph-io/dgraph/v25 Dgraph: Unauthenticated /debug/pprof/cmdline discloses admin auth token, enabling unauthorized access to protected Alpha admin endpoints Critical 9.4 6 months ago 1 month ago
github.com/dgraph-io/dgraph/v25 Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import Critical 9.1 1 month ago 1 month ago
github.com/dgraph-io/dgraph/v25 Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field Critical 9.1 5 months ago 1 month ago
github.com/dgraph-io/dgraph/v25 Dgraph: Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization Critical 10.0 6 months ago 1 month ago
github.com/dgraph-io/dgraph/v25 Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import in github.com/dgraph-io/dgraph Unknown 1 month ago 1 month ago
github.com/dgraph-io/dgraph/v25 Pre-Auth DQL injection in upsert condition field in github.com/dgraph-io/dgraph Unknown 2 months ago 2 months ago
github.com/dgraph-io/dgraph/v25 Unauthenticated restoreTenant mutation allows database overwrite and SSRF in github.com/dgraph-io/dgraph Unknown 2 months ago 2 months ago
github.com/dgraph-io/dgraph/v25 Dgraph: Unauthenticated admin token disclosure via /debug/pprof/cmdline in github.com/dgraph-io/dgraph Unknown 2 months ago 2 months ago
github.com/dgraph-io/dgraph/v25 Unauthenticated admin token disclosure via /debug/vars in github.com/dgraph-io/dgraph Unknown 2 months ago 2 months ago
github.com/dgraph-io/dgraph/v25 DQL injection via unsanitized NQuad Lang field in github.com/dgraph-io/dgraph Unknown 3 months ago 2 months ago
github.com/dgraph-io/dgraph/v25 DQL injection via checkUserPassword GraphQL query in github.com/dgraph-io/dgraph Unknown 3 months ago 2 months ago
github.com/dgraph-io/dgraph/v25 Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query High Risk 7.5 3 months ago 3 months ago
Data courtesy of OSV.dev
Page 1