EUVD-2023-1505Published
Dgraph Audit Log Encryption nonce reuse
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2023-31135 · Microsoft / collected KEV context
cve-program · CVE-2023-31135
- https://github.com/dgraph-io/dgraph/security/advisories/GHSA-92wq-q9pq-gw47
- https://github.com/dgraph-io/dgraph/pull/8323
- https://en.wikipedia.org/wiki/Cryptographic_nonce
euvd · EUVD-2023-1505
- https://github.com/dgraph-io/dgraph/security/advisories/GHSA-92wq-q9pq-gw47
- https://github.com/dgraph-io/dgraph/pull/8323
- https://en.wikipedia.org/wiki/Cryptographic_nonce
nvd · CVE-2023-31135
- https://en.wikipedia.org/wiki/Cryptographic_nonce
- https://github.com/dgraph-io/dgraph/pull/8323
- https://github.com/dgraph-io/dgraph/security/advisories/GHSA-92wq-q9pq-gw47
osv · GHSA-92wq-q9pq-gw47
- https://github.com/dgraph-io/dgraph/security/advisories/GHSA-92wq-q9pq-gw47
- https://nvd.nist.gov/vuln/detail/CVE-2023-31135
- https://github.com/dgraph-io/dgraph/pull/8323
- https://en.wikipedia.org/wiki/Cryptographic_nonce
- https://github.com/dgraph-io/dgraph
- https://github.com/dgraph-io/dgraph/releases/tag/v23.0.0
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.