Changes.Watch~ upgrade verdicts ~
Free digest
CriticalPHP2Shell: is your PHP patched?

critical vulnerability

Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service

Fix availableCritical · CVSS 9.2EPSS 0.49%

Published Oct 15, 2026 · updated Oct 15, 2026

What to do

  1. Upgrade to a fixed version: github.com/dgraph-io/dgraph/v25 25.4.0.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

Gogithub.com/dgraph-io/dgraph/v25

Vulnerable versions
<= 25.3.8
Fixed in
25.4.0

Check your project: go list -m all | grep github.com/dgraph-io/dgraph/v25

Sources

CWE-306 Missing Authentication for Critical Function · CWE-862 Missing Authorization

← All critical vulnerabilities