Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Dgraph

First CVE: May 17, 2023Active for: 3 yearsTotal CVEs: 6

Dgraph is a graph database platform whose narrow but prominent product footprint sits in the data-layer of modern application architectures, handling queries and storing sensitive relationship data. Vulnerabilities affecting the vendor skew strongly toward critical severity and frequently acquire public exploit code; the recurring weakness classes—including sensitive information exposure, improper query neutralization, weak encryption, debug-code information leakage, and inadequate credential protection—reflect the authentication, encryption, and injection-resistance demands of a query-processing engine. Defenders should treat Dgraph advisories as high-priority for any deployment handling sensitive or relational data; current exploitation activity and exposure counts are shown alongside this summary.

FAUCET AI Generated
6
Total CVEs
More Total CVEs than 86% of tracked vendors
3.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 91% of tracked vendors
8.8
Avg CVSS Score
Higher Avg CVSS Score than 87% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Dgraph over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 17, 2023
3 years ago
Most Recent CVE
Apr 24, 2026
91 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (6 CVEs).

6 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2026-41492CRITICAL
Dgraph is an open source distributed GraphQL database. Prior to 25.3.3, Dgraphl exposes the process command line through the unauthenticated /debug/vars endpoint on Alpha. Because
Apr 24, 20269.853NOYES
CVE-2026-41328CRITICAL
Dgraph is an open source distributed GraphQL database. Prior to 25.3.3, a vulnerability has been found in Dgraph that gives an unauthenticated attacker full read access to every pi
Apr 24, 20269.136NONO
CVE-2026-41327CRITICAL
Dgraph is an open source distributed GraphQL database. Prior to 25.3.3, a vulnerability has been found in Dgraph that gives an unauthenticated attacker full read access to every pi
Apr 24, 20269.136NONO
CVE-2026-34976CRITICAL
Dgraph is an open source distributed GraphQL database. Prior to 25.3.1, the restoreTenant admin mutation is missing from the authorization middleware config (admin.go), making it c
Apr 6, 202610.036NONO
CVE-2026-40173CRITICAL
Dgraph is an open source distributed GraphQL database. Versions 25.3.1 and prior contain an unauthenticated credential disclosure vulnerability where the /debug/pprof/cmdline endpo
Apr 15, 20269.432NONO
CVE-2023-31135MEDIUM
Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 bytes come from a base
May 17, 20235.520NONO
View all 6 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products6 CVEs
17%
83%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumCritical
Attack Vector
Local1 (16.7%)
Network5 (83.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None6 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (16.7%)
High0 (0.0%)
None5 (83.3%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (6 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
16.7% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Dgraph.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Dgraph — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Dgraph's Products

View all 1 CNAs →

Top CWEs