github.com/dgraph-io/dgraph/v24
govv24.1.8high-performance graph database for real-time use cases
31 versions240 maintainers0 deps21,670 weekly dl
dgraph-io/dgraph/v2452
/ 100
Health
do not use
github.com/dgraph-io/dgraph/v24 has critical vulnerabilities — do not use
Update to >= 25.3.3 to fix known vulnerabilities
- 4 critical vulnerabilities
Health breakdown0 – 100
25/25
maintenance
10/20
popularity
0/25
security
12/15
maturity
5/15
community
Vulnerabilities
4
4 critical
Advisories (4)
| Severity | ID | Summary | Fixed in |
|---|---|---|---|
| critical | CVE-2026-40173 | Dgraph: Unauthenticated /debug/pprof/cmdline discloses admin auth token, enabling unauthorized access to protected Alpha admin endpoints | 25.3.2 |
| critical | CVE-2026-41327 | Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field | 25.3.3 |
| critical | CVE-2026-34976 | Dgraph: Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization | 25.3.1 |
| critical | CVE-2026-41328 | Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field | 25.3.3 |
Health History
Dependency Tree
License Audit
API access
Get this data programmatically — free, no authentication.
curl https://depscope.dev/api/check/go/github.com/dgraph-io/dgraph/v24Last updated · 2026-04-21T20:47:15Z