Junglewise Threat Intelligence
CVE-2026-41328: GO-2026-5749 - DQL injection via unsanitized NQuad Lang field in github.com/dgraph-io/dgraph
CVE-2026-41328 · Severity: low · CVSS 3.1 · Published 2026-06-25
Technologies: github.com/dgraph-io/dgraph/v24 (Go), github.com/dgraph-io/dgraph (Go), github.com/dgraph-io/dgraph/v25 (Go), github.com/hypermodeinc/dgraph/v24 (Go). Vendors: Go.
Executive brief
DQL injection via unsanitized NQuad Lang field in github.com/dgraph-io/dgraph
Affected products
- Go github.com/dgraph-io/dgraph/v24
- Go github.com/dgraph-io/dgraph
- Go github.com/dgraph-io/dgraph/v25
- Go github.com/hypermodeinc/dgraph/v24