neo4j-contrib
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| mcp-neo4j | 1 | – | Apr 17, 2026 |
| neo4j-apoc-procedures | 1 | – | Jan 14, 2023 |
Exploited and recent CVEs
- CVE-2026-35402 mcp-neo4j-cypher: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures 0.3%
- CVE-2022-23532 neo4j-apoc-procedures is vulnerable to path traversal 0.7%