Go/github.com/dgraph-io/dgraph CVE-2026-41328: unknown, EPSS 0.48%

DQL injection via unsanitized NQuad Lang field in github.com/dgraph-io/dgraph

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5749
• https://github.com/dgraph-io/dgraph/security/advisories/GHSA-x92x-px7w-4gx4

CVE-2026-41328 · published 2026-06-25T22:34:41Z · modified 2026-07-23T17:45:22.515915133Z · JSON