{"api_version":"v1","generated_at":"2026-10-04T13:20:00+00:00","product":{"cve_count":9,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-dgraph-io-dgraph-e9481ff92136","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/dgraph","name":"dgraph","next_cursor":null,"observations":[{"affected":"< 25.3.8","affected_versions_present":true,"cve_id":"CVE-2026-63637","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63637","fixed":"25.3.8.","last_modified":"2026-08-07T16:54:23.924Z","patch_url":"https://github.com/dgraph-io/dgraph/security/advisories/GHSA-33p8-wc97-5qcj","primary_source":"","published":"2026-08-06T20:20:32.352Z"},{"affected":"< 25.3.4","affected_versions_present":true,"cve_id":"CVE-2026-44840","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44840","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-09T13:29:15.314Z","patch_url":"","primary_source":"","published":"2026-07-08T13:27:44.178Z"},{"affected":"< 25.3.5","affected_versions_present":true,"cve_id":"CVE-2026-54061","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54061","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-08T14:26:13.341Z","patch_url":"","primary_source":"","published":"2026-07-08T13:23:56.884Z"},{"affected":"< 25.3.3","affected_versions_present":true,"cve_id":"CVE-2026-41492","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41492","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-24T19:13:03.267Z","patch_url":"","primary_source":"","published":"2026-04-24T18:29:40.555Z"},{"affected":"< 25.3.3","affected_versions_present":true,"cve_id":"CVE-2026-41327","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41327","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-24T19:05:56.125Z","patch_url":"https://github.com/dgraph-io/dgraph/security/advisories/GHSA-mrxx-39g5-ph77","primary_source":"","published":"2026-04-24T18:27:51.477Z"},{"affected":"< 25.3.3","affected_versions_present":true,"cve_id":"CVE-2026-41328","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41328","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-24T19:57:59.743Z","patch_url":"https://github.com/dgraph-io/dgraph/security/advisories/GHSA-x92x-px7w-4gx4","primary_source":"","published":"2026-04-24T18:25:43.894Z"},{"affected":"< 25.3.2","affected_versions_present":true,"cve_id":"CVE-2026-40173","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40173","fixed":"25.3.2.","last_modified":"2026-04-16T12:05:10.186Z","patch_url":"https://github.com/dgraph-io/dgraph/security/advisories/GHSA-95mq-xwj4-r47p","primary_source":"","published":"2026-04-15T20:40:47.186Z"},{"affected":"< 25.3.1","affected_versions_present":true,"cve_id":"CVE-2026-34976","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34976","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T16:00:19.660Z","patch_url":"","primary_source":"","published":"2026-04-06T16:12:43.596Z"},{"affected":"< 23.0.0","affected_versions_present":true,"cve_id":"CVE-2023-31135","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-31135","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-22T16:46:46.241Z","patch_url":"https://github.com/dgraph-io/dgraph/pull/8323","primary_source":"","published":"2023-05-17T17:04:52.138Z"}],"source_generated_at":"2026-10-04T06:24:23.053Z","vendor":"dgraph-io"}}