org.jqassistant.contrib.plugin:jqassistant-apoc-plugin (>=1.9.0, <=1.10.0) potentially affected by unknown CVE via org.neo4j.procedure:apoc (3.5.0.15)

org.neo4j.procedure:apoc MAVEN version 3.5.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j.procedure:apoc and may be impacted: - org.jqassistant.contrib.plugin:jqassistant-apoc-plugin =1.9.0, =1.10.0 Source cves: unknown CVE Source...

org.jqassistant.contrib.plugin:jqassistant-apoc-plugin (>=1.8.0, <=1.8.1) potentially affected by unknown CVE via org.neo4j.procedure:apoc (3.5.0.7)

org.neo4j.procedure:apoc MAVEN version 3.5.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j.procedure:apoc and may be impacted: - org.jqassistant.contrib.plugin:jqassistant-apoc-plugin =1.8.0, =1.8.1 Source cves: unknown CVE Source advisor...

CVE-2023-23926

APOC Awesome Procedures on Cypher is an add-on library for Neo4j. An XML External Entity XXE vulnerability found in the apoc.import.graphml procedure of APOC core plugin prior to version 5.5.0 and 4.4.0.14 4.4 branch in Neo4j graph database. XML External Entity XXE injection occurs when the XML...

org.jqassistant.contrib.plugin:jqassistant-apoc-plugin (>=1.8.0, <=1.8.1) potentially affected by CVE-2022-23532 via org.neo4j.procedure:apoc (3.5.0.7)

org.neo4j.procedure:apoc MAVEN version 3.5.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j.procedure:apoc and may be impacted: - org.jqassistant.contrib.plugin:jqassistant-apoc-plugin =1.8.0, =1.8.1 Source cves: CVE-2022-23532 Source...

org.jqassistant.contrib.plugin:jqassistant-apoc-plugin (>=1.9.0, <=1.10.0) potentially affected by CVE-2022-23532 via org.neo4j.procedure:apoc (3.5.0.15)

org.neo4j.procedure:apoc MAVEN version 3.5.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j.procedure:apoc and may be impacted: - org.jqassistant.contrib.plugin:jqassistant-apoc-plugin =1.9.0, =1.10.0 Source cves: CVE-2022-23532 Source...

org.jqassistant.contrib.plugin:jqassistant-apoc-plugin (>=1.8.0, <=1.8.1) potentially affected by CVE-2022-37423 via org.neo4j.procedure:apoc (3.5.0.7)

org.neo4j.procedure:apoc MAVEN version 3.5.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j.procedure:apoc and may be impacted: - org.jqassistant.contrib.plugin:jqassistant-apoc-plugin =1.8.0, =1.8.1 Source cves: CVE-2022-37423 Source...

org.jqassistant.contrib.plugin:jqassistant-apoc-plugin (>=1.9.0, <=1.10.0) potentially affected by CVE-2022-37423 via org.neo4j.procedure:apoc (3.5.0.15)

org.neo4j.procedure:apoc MAVEN version 3.5.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j.procedure:apoc and may be impacted: - org.jqassistant.contrib.plugin:jqassistant-apoc-plugin =1.9.0, =1.10.0 Source cves: CVE-2022-37423 Source...

Neo4j path traversal vulnerability

Neo4j is a Java-based and fully ACID-compatible graph database from Neo4j, Inc. that supports data migration, add-ons, and more. A path traversal vulnerability exists in Neo4j Graph, which stems from a directory traversal vulnerability in the Apoc plugin in Neo4j Graph databases 4.0.0 through 4.3...