Skip to content
OpenAdvisories

Vendor

neo4j

17 known vulnerabilities.

Products

Enterprise Edition 8 Community Edition 4 @neo4j/graphql 4 graphql 2 apoc 1 neo4j-cypher MCP server 1 Neo4j 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-92681

    @neo4j/graphql: schema-level and type-level @authentication not enforced on top-level @cypher fields

    In @neo4j/graphql versions up to and including 7.6.3, @authentication directives applied at the schema level or on the Query or Mutation types are silently ignored for top-level fields annotated with @cypher. Only @authentication directives placed directly on…

    neo4j @neo4j/graphql