GHSA-7P3P-8QV8-M2VH vulnerabilities

Vulnerabilities for packages: druid, cloudwatch-exporter, neo4j, apache-tika, confluent-kafka, dependency-track, strimzi-kafka-operator, akhq, solr...

CVE-2026-10050 vulnerabilities

Vulnerabilities for packages: tez, druid, cloudwatch-exporter, neo4j, apache-tika, confluent-kafka, dependency-track, trino, akhq, solr...

GHSA-W7X5-G22V-XQHR vulnerabilities

Vulnerabilities for packages: druid, neo4j, trino, confluent-kafka, dependency-track, strimzi-kafka-operator, akhq, solr...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: druid, neo4j, trino, confluent-kafka, dependency-track, strimzi-kafka-operator, akhq, solr...

GHSA-2FVJ-HGJ9-J2GR vulnerabilities

Vulnerabilities for packages: tez, druid, cloudwatch-exporter, neo4j, apache-tika, confluent-kafka, dependency-track, trino, akhq, solr...

CVE-2026-8384 vulnerabilities

Vulnerabilities for packages: druid, neo4j, trino, confluent-kafka, dependency-track, strimzi-kafka-operator, akhq, solr...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection through the audit event search ORDER BY handling in JPAAuditEventDAO and Neo4jAuditEventDAO. An administrator with the right entitlements can execute arbitrary SQL by supplying crafted sort parameters in an audit-events...

The vulnerabilities of the `deleteNode()` and `retrieveNodes()` functions in the `Neo4jProducer` class of the `camel-neo4j` component of the Apache Camel framework allow a malicious actor to gain access to read, modify, or delete any nodes and relationships.

The vulnerability of the deleteNode and retrieveNodes functions in the Neo4jProducer class of the camel-neo4j framework from Apache Camel is related to improper elimination of special elements in data queries. Exploiting this vulnerability could allow an attacker to gain access to read, modify, o...

PYSEC-2026-2576 Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type allowlist, and no opt-out gate. The query text is influenceable by prompt injection direct user input or indirect content the agent reads back via RAG, so an attacker who can...

Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures

SummaryThe readonly mode in mcp-neo4j-cypher versions prior to 0.6.0 can be bypassed using CALL procedures. Details ImpactThe enforcing of readonly mode in vulnerable versions could be bypassed by certain APOC procedures. Patchesv0.6.0 release hardened the checks around the mode. The only way to...

PYSEC-2026-2626 Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures

Summary The readonly mode in mcp-neo4j-cypher versions prior to 0.6.0 can be bypassed using CALL procedures. Details Impact The enforcing of readonly mode in vulnerable versions could be bypassed by certain APOC procedures. Patches v0.6.0 release hardened the checks around the mode. The only way ...

PT-2026-59278

Summary The read only mode in mcp-neo4j-cypher versions prior to 0.6.0 can be bypassed using CALL procedures. Details Impact The enforcing of read only mode in vulnerable versions could be bypassed by certain APOC procedures. Patches v0.6.0 release hardened the checks around the mode. The only wa...

PT-2026-59167

Summary Graphiti versions before 0.28.2 contained a Cypher injection vulnerability in shared search-filter construction for non-Kuzu backends. Attacker-controlled label values supplied through SearchFilters.node labels were concatenated directly into Cypher label expressions without validation. I...

Command Injection

langroid is vulnerable to Command Injection. The vulnerability is due to the Neo4jChatAgent executing LLM-generated Cypher queries without validation, statement-type restrictions, or an opt-out mechanism, which allows an attacker to exploit prompt injection to execute arbitrary Cypher queries,...

CVE-2026-55615

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.5, Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type allowlist, and no opt-out gate. The query text is influenceable by prompt...

CVE-2026-55615 Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.5, Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type allowlist, and no opt-out gate. The query text is influenceable by prompt...

CVE-2026-55615

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.5, Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type allowlist, and no opt-out gate. The query text is influenceable by prompt...

Neo4j Cypher MCP server is vulnerable to DNS rebinding

ImpactDNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend...

PYSEC-2026-1620 Neo4j Cypher MCP server is vulnerable to DNS rebinding

Impact DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spen...

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview langroid is a Harness LLMs with Multi-Agent Programming Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' via the Neo4jChatAgent process. An attacker can gain unauthorized access to all gra...