tag
Neo4j
Low
Neo4j Bolt Transaction Metadata Log Injection (CVE-2026-1337)
CVE-2026-1337·
Neo4j graph database (Bolt protocol, query.log)
unpatched
High
graphiti-core Cypher Injection via Unsanitized node_labels — CVE-2026-32247
CVE-2026-32247 (GHSA, getzep/graphiti)·
graphiti-core (getzep/graphiti) — memory/graph layer used by AI agent frameworks, exposed via an MCP server
patched