CVEs published by Neo4j

CVEs published by Neo4j (CVE Numbering Authority). 2 tracked.

• CVE-2026-5423 HIGH 8.2 @neo4j/graphql library versions prior to 7.5.6 fail to verify the authenticity of a client-supplied, pre-decod
• CVE-2026-19869 HIGH 7.6 @neo4j/graphql from 5.2.0 until the patched versions fails to enforce field-level @authentication rules on roo

← Back to latest CVEs