CVE-2026-32247

CVE-2026-32247 — Iniezione Cypher in graphiti-core tramite nodelabels non sanificati Gravità : Alta CVSS 8.1 CWE : CWE-943 — Neutralizzazione impropria di elementi speciali nella logica delle query di dati Componente interessato : graphiti-core = 0.28.1 pip Corretto in : 0.28.2 Avviso : GHSA NVD ...

Exploit for Improper Neutralization of Special Elements in Data Query Logic in Getzep Graphiti

CVE-2026-32247 — Cypher Injection in graphiti-core via unsanit...

Improper Neutralization of Special Elements in Data Query Logic

Overview graphiti-core is an A temporal graph building library Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via the SearchFilters.nodelabels process. An attacker can execute arbitrary Cypher queries within the privileges of th...