Dgraph Labs (now Hypermode)

Dgraph Labs (now Hypermode) on fru.dev

Dgraph Labs (now Hypermode) across fru.dev: timeline

  1. Dgraph Alpha exposes the RPCs used for external snapshot import on the public... (Advisories)
  2. DQL injection via checkUserPassword GraphQL query in github.com/dgraph-io/dgraph (Advisories)
  3. Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field (Advisories)
  4. Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field (Advisories)
  5. Dgraph: Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars (Advisories)
  6. Dgraph: information disclosure (Advisories)
  7. Dgraph: Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization (Advisories)
  8. Dgraph Audit Log Encryption Vulnerability (Advisories)

Sources