GO-2026-5274: Dgraph: Unauthenticated admin token disclosure via /debug/pprof/cmdline in github.com/dgraph-io/dgraph
GO-2026-5516: Pre-Auth DQL injection in upsert condition field in github.com/dgraph-io/dgraph
GO-2026-5529: Unauthenticated restoreTenant mutation allows database overwrite and SSRF in github.com/dgraph-io/dgraph
GO-2026-5675: Unauthenticated admin token disclosure via /debug/vars in github.com/dgraph-io/dgraph
GO-2026-5749: DQL injection via unsanitized NQuad Lang field in github.com/dgraph-io/dgraph
GO-2026-5837: DQL injection via checkUserPassword GraphQL query in github.com/dgraph-io/dgraph
GO-2026-6261: Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import in github.com/dgraph-io/dgraph