query

Apr 21, 2026 GO-2026-5837

  GO-2026-5837: Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query in github.com/dgraph-io/dgraph

Apr 13, 2026 GO-2026-5749 +1 more

  GO-2026-5749: Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field in github.com/dgraph-io/dgraph

  GO-2026-5837: Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query in github.com/dgraph-io/dgraph

Apr 1, 2026 GO-2026-5749 +1 more

  GO-2026-5749: Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field in github.com/dgraph-io/dgraph

  GO-2026-5837: Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query in github.com/dgraph-io/dgraph

Mar 20, 2026 GO-2026-5749 +1 more

  GO-2026-5749: Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field in github.com/dgraph-io/dgraph

  GO-2026-5837: Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query in github.com/dgraph-io/dgraph

Mar 6, 2026 GO-2026-5749 +1 more

  GO-2026-5749: Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field in github.com/dgraph-io/dgraph

  GO-2026-5837: Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query in github.com/dgraph-io/dgraph

Feb 16, 2026 GO-2026-5749 +1 more

  GO-2026-5749: Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field in github.com/dgraph-io/dgraph

  GO-2026-5837: Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query in github.com/dgraph-io/dgraph

Jan 29, 2026 GO-2026-5749 +1 more

  GO-2026-5749: Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field in github.com/dgraph-io/dgraph

  GO-2026-5837: Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query in github.com/dgraph-io/dgraph

Dec 11, 2025 GO-2026-5749 +1 more

  GO-2026-5749: Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field in github.com/dgraph-io/dgraph

  GO-2026-5837: Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query in github.com/dgraph-io/dgraph

Changes in this version

+ const BIGFLOAT

+ const DEFAULT

+ const FLOAT

+ const INT

+ const VFLOAT

+ var ErrEmptyVal = errors.New("Query: harmless error, e.g. task.Val is nil")

+ var ErrStopIteration = errors.New("stop iteration")

+ var ErrWrongAgg = errors.New("Wrong level for var aggregation")

+ var ErrorArgsDisagree = errors.New("Left and right arguments must match")

+ var ErrorBadVectorMult = errors.New("Cannot multiply vector by vector")

+ var ErrorDivisionByZero = errors.New("Division by zero")

+ var ErrorFloat32Overflow = errors.New("Float32 overflow")

+ var ErrorFractionalPower = errors.New("Fractional power of negative number")

+ var ErrorIntOverflow = errors.New("Integer overflow")

+ var ErrorNegativeLog = errors.New("Log of negative number")

+ var ErrorNegativeRoot = errors.New("Root of negative number")

+ var ErrorShouldBeVector = errors.New("Type should be []float, but is not. Cannot determine type.")

+ var ErrorVectorsNotMatch = errors.New("The length of vectors must match")

+ func ApplyMutations(ctx context.Context, m *pb.Mutations) (*api.TxnContext, error)

+ func AssignUids(ctx context.Context, gmuList []*dql.Mutation) (map[string]uint64, error)

+ func ExpandEdges(ctx context.Context, m *pb.Mutations) ([]*pb.DirectedEdge, error)

+ func ExtractBlankUIDs(ctx context.Context, gmuList []*dql.Mutation) (map[string]uint64, error)

+ func ProcessGraph(ctx context.Context, sg, parent *SubGraph, rch chan error)

+ func StripBlankNode(mp map[string]uint64) map[string]uint64

+ func ToDirectedEdges(gmuList []*dql.Mutation, newUids map[string]uint64) (edges []*pb.DirectedEdge, err error)

+ func ToJson(ctx context.Context, l *Latency, sgl []*SubGraph, field gqlSchema.Field) ([]byte, error)

+ func ToRDF(l *Latency, sgl []*SubGraph) ([]byte, error)

+ func UidToHex(uid uint64) string

+ func UidsToHex(m map[string]uint64) map[string]string

+ type CascadeArgs struct

+ Fields []string

+ First int

+ Offset int

+ type ContextKey int

+ const DebugKey

+ type ExecutionResult struct

+ Metrics map[string]uint64

+ SchemaNode []*pb.SchemaNode

+ Subgraphs []*SubGraph

+ Types []*pb.TypeUpdate

+ type Extensions struct

+ Latency *api.Latency

+ Metrics *api.Metrics

+ Txn *api.TxnContext

+ type Function struct

+ Args []dql.Arg

+ IsCount bool

+ IsLenVar bool

+ IsValueVar bool

+ Name string

+ type Latency struct

+ AssignTimestamp time.Duration

+ Json time.Duration

+ Parsing time.Duration

+ Processing time.Duration

+ Start time.Time

+ type Request struct

+ Cache int

+ DqlQuery *dql.Result

+ Latency *Latency

+ ReadTs uint64

+ Subgraphs []*SubGraph

+ Vars map[string]varValue

+ func (req *Request) Process(ctx context.Context) (er ExecutionResult, err error)

+ func (req *Request) ProcessQuery(ctx context.Context) (err error)

+ type SubGraph struct

+ Attr string

+ Cache int

+ Children []*SubGraph

+ DestUIDs *pb.List

+ ExpandPreds []*pb.ValueList

+ FilterOp string

+ Filters []*SubGraph

+ GroupbyRes []*groupResults

+ LangTags []*pb.LangList

+ List bool

+ MathExp *mathTree

+ Params params

+ ReadTs uint64

+ SrcFunc *Function

+ SrcUIDs *pb.List

+ UnknownAttr bool

+ func ToSubGraph(ctx context.Context, gq *dql.GraphQuery) (*SubGraph, error)

+ func (sg *SubGraph) DebugPrint(prefix string)

+ func (sg *SubGraph) IsGroupBy() bool

+ func (sg *SubGraph) IsInternal() bool

Dec 4, 2025 GO-2026-5749 +1 more

  GO-2026-5749: Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field in github.com/dgraph-io/dgraph

  GO-2026-5837: Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query in github.com/dgraph-io/dgraph