neo4j-2026.04

Direct Vulnerabilities

Known vulnerabilities in the neo4j-2026.04 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2026-68494	<2026.04.0-r5
L GHSA-642r-3gj9-2pj5	<2026.04.0-r5
L CVE-2026-91777	<2026.04.0-r6
L CVE-2026-91776	<2026.04.0-r6
L GHSA-cxp5-3px4-pw24	<2026.04.0-r6
L GHSA-wv8q-qhhj-9h54	<2026.04.0-r6
L Server-Side Request Forgery (SSRF)	<2026.04.0-r5
L GHSA-hgj6-7826-r7m5	<2026.04.0-r5
L CVE-2026-83557	<2026.04.0-r5
L Incorrect Authorization	<2026.04.0-r5
L GHSA-5hh8-q8hv-fr38	<2026.04.0-r5
L Incorrect Authorization	<2026.04.0-r5
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<2026.04.0-r5
L GHSA-5gvw-p9qm-jgwh	<2026.04.0-r5
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<2026.04.0-r5
L CVE-2026-18401	<2026.04.0-r5
L GHSA-mhm7-754m-9p8w	<2026.04.0-r5
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<2026.04.0-r5
L GHSA-q4xh-88c3-wmh7	<2026.04.0-r5
L Incomplete Blacklist	<2026.04.0-r5
L Server-Side Request Forgery (SSRF)	<2026.04.0-r5
L CVE-2026-68497	<2026.04.0-r5
L GHSA-6qm2-mcq7-53qp	<2026.04.0-r5
L CVE-2026-19032	<2026.04.0-r5
L Incorrect Authorization	<2026.04.0-r5
L GHSA-j3rv-43j4-c7qm	<2026.04.0-r5
L GHSA-5jmj-h7xm-6q6v	<2026.04.0-r5
L GHSA-gx83-3vf8-gh7j	<2026.04.0-r5
L GHSA-rmj7-2vxq-3g9f	<2026.04.0-r5
L Incomplete Blacklist	<2026.04.0-r5
L GHSA-72hv-8253-57qq	<2026.04.0-r5
L GHSA-3pjw-73gf-8qr5	<2026.04.0-r5
L GHSA-wjgm-6hv5-3cvf	<2026.04.0-r5
L GHSA-vvgp-rfg2-7rr6	<2026.04.0-r5
L GHSA-r7wm-3cxj-wff9	<2026.04.0-r5
L GHSA-9fxm-vc8v-hj55	<2026.04.0-r5
L GHSA-rcqc-6cw3-h962	<2026.04.0-r5
L Integer Overflow or Wraparound	<2026.04.0-r3
L GHSA-mvh2-crg5-v77c	<2026.04.0-r3
H Memory Leak	<2026.04.0-r3
L GHSA-6cqp-g7gg-8hr5	<2026.04.0-r3
H Loop with Unreachable Exit Condition ('Infinite Loop')	<2026.04.0-r3
L GHSA-q6cq-mhr2-jmr5	<2026.04.0-r3
L GHSA-v8h7-rr48-vmmv	<2026.04.0-r3
L GHSA-cc37-9q2j-3hfv	<2026.04.0-r3
L GHSA-hvcg-qmg6-jm4c	<2026.04.0-r3
C HTTP Request Smuggling	<2026.04.0-r3
H HTTP Request Smuggling	<2026.04.0-r3
L Improper Check or Handling of Exceptional Conditions	<2026.04.0-r3
L GHSA-38f8-5428-x5cv	<2026.04.0-r3
L GHSA-57rv-r2g8-2cj3	<2026.04.0-r3
L GHSA-xxqh-mfjm-7mv9	<2026.04.0-r3
H HTTP Request Smuggling	<2026.04.0-r3
L Allocation of Resources Without Limits or Throttling	<2026.04.0-r3
L Improper Verification of Cryptographic Signature	<2026.04.0-r3
L GHSA-558v-64gr-wgg4	<2026.04.0-r3
H Resource Exhaustion	<2026.04.0-r3
L GHSA-jppx-w49h-x2qq	<2026.04.0-r3
L Resource Exhaustion	<2026.04.0-r3
L GHSA-4mp9-239f-g9hg	<2026.04.0-r3
H Resource Exhaustion	<2026.04.0-r3
L CRLF Injection	<2026.04.0-r3
L Improper Access Control	<2026.04.0-r3
L GHSA-m4cv-j2px-7723	<2026.04.0-r3
L HTTP Request Smuggling	<2026.04.0-r3
L GHSA-x4gw-5cx5-pgmh	<2026.04.0-r3
L GHSA-h2qv-fj59-j46j	<2026.04.0-r3
C HTTP Request Smuggling	<2026.04.0-r3
L GHSA-c653-97m9-rcg9	<2026.04.0-r3
H Allocation of Resources Without Limits or Throttling	<2026.04.0-r3
L GHSA-3qp7-7mw8-wx86	<2026.04.0-r3
H Information Exposure Through Caching	<2026.04.0-r3
L GHSA-q4f6-jm68-57ww	<2026.04.0-r3
L Improper Access Control	<2026.04.0-r3
M CRLF Injection	<2026.04.0-r3
L CRLF Injection	<2026.04.0-r3
L GHSA-f6hv-jmp6-3vwv	<2026.04.0-r3
L Resource Exhaustion	<2026.04.0-r3
L Information Exposure	<2026.04.0-r3
L Resource Exhaustion	<2026.04.0-r3
L GHSA-8c42-7qj2-3j46	<2026.04.0-r3
L GHSA-mj4r-2hfc-f8p6	<2026.04.0-r3
L GHSA-6jqx-86gh-f27w	<2026.04.0-r3
L Resource Exhaustion	<2026.04.0-r3
L GHSA-gcjf-9mgh-3p7g	<2026.04.0-r3
L GHSA-wh89-7897-x99h	<2026.04.0-r3
L GHSA-w573-9ffj-6ff9	<2026.04.0-r3
L GHSA-rwm7-x88c-3g2p	<2026.04.0-r3
L Missing Release of Resource after Effective Lifetime	<2026.04.0-r3

Vulnerability

Vulnerable Version

CVE-2026-68494

<2026.04.0-r5