Skip to content
OpenAdvisories

Vendor

neo4j

17 known vulnerabilities.

Products

Enterprise Edition 8 Community Edition 4 @neo4j/graphql 4 graphql 2 apoc 1 neo4j-cypher MCP server 1 Neo4j 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 1.1
    CVE-2026-1337 Public exploit

    Insufficient escaping of unicode characters in query log

    Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML. There is no security impact on Neo4j products, but this advisor…

    neo4j Enterprise Edition Community Edition neo4j-2025.10 Wolfi Maven