GHSA-93WV-JW9V-4972 vulnerabilities

Vulnerabilities for packages: elasticsearch, kayenta, keycloak-fips, neo4j, camunda-zeebe, keycloak...

CVE-2026-56819 vulnerabilities

Vulnerabilities for packages: elasticsearch, kayenta, keycloak-fips, neo4j, camunda-zeebe, keycloak...

CVE-2026-56819 vulnerabilities

Vulnerabilities for packages: neo4j, keycloak...

GHSA-93WV-JW9V-4972 vulnerabilities

Vulnerabilities for packages: neo4j, keycloak...

CVE-2026-10050 vulnerabilities

Vulnerabilities for packages: solr, neo4j, akhq, apache-tika, confluent-kafka, tez...

GHSA-7P3P-8QV8-M2VH vulnerabilities

Vulnerabilities for packages: confluent-kafka, neo4j, akhq, solr...

CVE-2026-6790 vulnerabilities

Vulnerabilities for packages: confluent-kafka, neo4j, akhq, solr...

CVE-2026-10051 vulnerabilities

Vulnerabilities for packages: solr, neo4j, akhq, confluent-kafka, strimzi-kafka-operator...

GHSA-W7X5-G22V-XQHR vulnerabilities

Vulnerabilities for packages: solr, neo4j, akhq, confluent-kafka, strimzi-kafka-operator...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: solr, neo4j, akhq, confluent-kafka, strimzi-kafka-operator...

CVE-2026-8384 vulnerabilities

Vulnerabilities for packages: solr, neo4j, akhq, confluent-kafka, strimzi-kafka-operator...

GHSA-2FVJ-HGJ9-J2GR vulnerabilities

Vulnerabilities for packages: solr, neo4j, akhq, apache-tika, confluent-kafka, tez...

PYSEC-2026-2576 Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type allowlist, and no opt-out gate. The query text is influenceable by prompt injection direct user input or indirect content the agent reads back via RAG, so an attacker who can...

PYSEC-2026-2626 Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures

Summary The readonly mode in mcp-neo4j-cypher versions prior to 0.6.0 can be bypassed using CALL procedures. Details Impact The enforcing of readonly mode in vulnerable versions could be bypassed by certain APOC procedures. Patches v0.6.0 release hardened the checks around the mode. The only way ...

CVE-2026-55615

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.5, Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type allowlist, and no opt-out gate. The query text is influenceable by prompt...

CVE-2026-55615

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.5, Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type allowlist, and no opt-out gate. The query text is influenceable by prompt...

PYSEC-2026-1620 Neo4j Cypher MCP server is vulnerable to DNS rebinding

Impact DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spen...

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview langroid is a Harness LLMs with Multi-Agent Programming Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' via the Neo4jChatAgent process. An attacker can gain unauthorized access to all gra...

Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type allowlist, and no opt-out gate. The query text is influenceable by prompt injection direct user input or indirect content the agent reads back via RAG, so an attacker who can...

GHSA-2PQ5-3Q89-J7CC Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type allowlist, and no opt-out gate. The query text is influenceable by prompt injection direct user input or indirect content the agent reads back via RAG, so an attacker who can...