Executive brief
Dgraph Audit Log Encryption Vulnerability
Affected products
- Go github.com/dgraph-io/dgraph
Junglewise Threat Intelligence
CVE-2023-31135: Dgraph Audit Log Encryption Vulnerability
CVE-2023-31135 · Severity: low · CVSS 3.1 · Published 2023-05-17
Technologies: github.com/dgraph-io/dgraph (Go). Vendors: Go.
Related threats
- GO-2026-5529 - Unauthenticated restoreTenant mutation allows database overwrite and SSRF in github.com/dgraph-io/dgraph
- GO-2026-5516 - Pre-Auth DQL injection in upsert condition field in github.com/dgraph-io/dgraph
- GO-2026-5675 - Unauthenticated admin token disclosure via /debug/vars in github.com/dgraph-io/dgraph
- Dgraph Alpha missing authentication for external snapshot import
- Dgraph DQL injection in checkUserPassword GraphQL query