All issues

Search results

Potential Vulnerabilities Due To Hidden Dependencies

Status: Open.

#4934 In JanusGraph/janusgraph;

· alinabrockmann opened on Aug 11, 2026

SubqueryIterator uses List.contains for index intersection, giving O(n*m) on an intentionally unbounded list

Status: Open.

#4932 In JanusGraph/janusgraph;

· batrived opened on Aug 11, 2026

Joint-index subquery cache stores limit-truncated results as complete, causing silently missing results

Status: Open.

#4931 In JanusGraph/janusgraph;

· batrived opened on Aug 11, 2026

updateIndex on a mixed index fails an unrelated precondition when no key is in an applicable status

Status: Open.

#4930 In JanusGraph/janusgraph;

· batrived opened on Aug 11, 2026

RestElasticSearchClient.clearStore does not lowercase the store name, so DISCARD_INDEX cannot delete data for mixed-case index names

Status: Open.

#4929 In JanusGraph/janusgraph;

· batrived opened on Aug 11, 2026

IndexSerializer.removeElement rejects String element ids, breaking mixed-index recovery for custom vertex id types

Status: Open.

#4928 In JanusGraph/janusgraph;

· batrived opened on Aug 11, 2026

MixedIndexTypeWrapper.fields is a non-volatile lazily-initialised array, allowing unsafe publication

Status: Open.

#4927 In JanusGraph/janusgraph;

· batrived opened on Aug 11, 2026

Elasticsearch: bulk items failing with HTTP 404 are silently discarded, so updates to a missing document are dropped permanently

Status: Open.

#4926 In JanusGraph/janusgraph;

· batrived opened on Aug 7, 2026

Elasticsearch: transient failures classified as PermanentBackendException, so index mutations are silently dropped instead of retried

Status: Open.

#4925 In JanusGraph/janusgraph;

· batrived opened on Aug 7, 2026

Edge materialization from a mixed index scans the full adjacency when the edge label has a sort key (seek is defeated)

Status: Open.

#4923 In JanusGraph/janusgraph;

· batrived opened on Jul 24, 2026

Janusgraph upgrade to 1.1.0

kind/bug/possible

Status: Open.

#4889 In JanusGraph/janusgraph;

· Shardul-Bh opened on Jan 12, 2026

match()-step returns false results

kind/bug/possible

Status: Open.

#4888 In JanusGraph/janusgraph;

· guijinxin opened on Jan 6, 2026