cognee-community-hybrid-adapter-falkor (0.2.5), cognee-community-retriever-code (>=0.1.4, <=0.1.5) +3 more potentially affected by CVE-2026-58473 via cognee (0.5.6)

cognee PYPI version 0.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-hybrid-adapter-falkor 0.2.5 - cognee-community-retriever-code =0.1.4, =0.1.4, =0.1.5 - cognee-community-vector-adapter-qdrant 0.2.4...

cognee-community-hybrid-adapter-duckdb (>=0.1.2, <=0.1.3), cognee-community-hybrid-adapter-falkor (0.2.1) +11 more potentially affected by CVE-2026-58473 via cognee (0.5.2)

cognee PYPI version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-hybrid-adapter-duckdb =0.1.2, =0.1.1, =0.1.1, =0.1.1, =0.1.2 - cognee-community-tasks-scrapegraph 0.1.0 -...

cognee-community-hybrid-adapter-falkor (0.2.0), cognee-community-vector-adapter-qdrant (0.2.0) potentially affected by CVE-2026-58473 via cognee (0.5.1)

cognee PYPI version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-hybrid-adapter-falkor 0.2.0 - cognee-community-vector-adapter-qdrant 0.2.0 Source cves: CVE-2026-58473 Source advisory:...

cognee-community-graph-adapter-memgraph (0.1.4), cognee-community-graph-adapter-networkx (1.0.3) +9 more potentially affected by CVE-2026-58473 via cognee (0.5.5)

cognee PYPI version 0.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-graph-adapter-memgraph 0.1.4 - cognee-community-graph-adapter-networkx 1.0.3 - cognee-community-graph-adapter-turingdb 0.1.1 -...

PT-2026-59167

Summary Graphiti versions before 0.28.2 contained a Cypher injection vulnerability in shared search-filter construction for non-Kuzu backends. Attacker-controlled label values supplied through SearchFilters.node labels were concatenated directly into Cypher label expressions without validation. I...

cognee-community-hybrid-adapter-falkor (0.2.0), cognee-community-vector-adapter-qdrant (0.2.0) potentially affected by CVE-2026-58473 via cognee (0.5.1)

cognee PYPI version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-hybrid-adapter-falkor 0.2.0 - cognee-community-vector-adapter-qdrant 0.2.0 Source cves: CVE-2026-58473 Source advisory:...

cognee-community-hybrid-adapter-falkor (0.2.5), cognee-community-retriever-code (>=0.1.4, <=0.1.5) +3 more potentially affected by CVE-2026-58473 via cognee (0.5.6)

cognee PYPI version 0.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-hybrid-adapter-falkor 0.2.5 - cognee-community-retriever-code =0.1.4, =0.1.4, =0.1.5 - cognee-community-vector-adapter-qdrant 0.2.4...

cognee-community-graph-adapter-memgraph (0.1.4), cognee-community-graph-adapter-networkx (1.0.3) +9 more potentially affected by CVE-2026-58473 via cognee (0.5.5)

cognee PYPI version 0.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-graph-adapter-memgraph 0.1.4 - cognee-community-graph-adapter-networkx 1.0.3 - cognee-community-graph-adapter-turingdb 0.1.1 -...

cognee-community-graph-adapter-arcadedb (0.2.0), cognee-community-graph-adapter-memgraph (0.2.0) +25 more potentially affected by CVE-2026-58473 via cognee (>=1.0.3, <=1.4.2)

cognee PYPI version =1.0.3, =1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-graph-adapter-arcadedb 0.2.0 - cognee-community-graph-adapter-memgraph 0.2.0 - cognee-community-graph-adapter-networkx 1.1...

CVE-2026-32247 Graphiti vulnerable to Cypher Injection via unsanitized node_labels in search filters

Graphiti is a framework for building and querying temporal context graphs for AI agents. Graphiti versions before 0.28.2 contained a Cypher injection vulnerability in shared search-filter construction for non-Kuzu backends. Attacker-controlled label values supplied through SearchFilters.nodelabel...

GHSA-GG5M-55JJ-8M5G Graphiti vulnerable to Cypher Injection via unsanitized node_labels in search filters

Summary Graphiti versions before 0.28.2 contained a Cypher injection vulnerability in shared search-filter construction for non-Kuzu backends. Attacker-controlled label values supplied through SearchFilters.nodelabels were concatenated directly into Cypher label expressions without validation. In...

balify (0.0.2), cognee (>=0.2.1.dev1, <=0.5.2) +35 more potentially affected by CVE-2025-68481 via fastapi-users (14.0.2)

fastapi-users PYPI version 14.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastapi-users and may be impacted: - balify 0.0.2 - cognee =0.2.1.dev1, =0.3.0, =0.1.2, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.2.1 -...

glibc security update

2.28-164.0.1 - Merge of RH patches for ol8-u5 beta release Review-exception: Routine merge - Provide glibc.pthread.mutexspincount tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for...

glibc security update

2.28-151.0.1.el84 - merge RH patches for ol8-u4 release Review-exception: Patch merge - Provide glibc.pthread.mutexspincount tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag ...

glibc security, bug fix, and enhancement update

2.28-151.0.1.el84 - merge RH patches for ol8-u4 release Review-exception: Patch merge - Provide glibc.pthread.mutexspincount tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag ...