NE
Product
@neo4j/graphql
by Neo4j · last CVE Oct 12, 2026
2
CVEs
0
On KEV
9.3
Max CVSS
2
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch

Add @neo4j/graphql to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-92681
9.3
0%
Oct 12
@neo4j/graphql: schema-level and type-level @authentication not enforced on top-level @cypher fields
Affected: 3.23.0 before 7.6.4
CVE-2026-92682
8.6
0%
Oct 12
@neo4j/graphql: authorization relationship and connection filters invert the "none" quantifier
Affected: 7.0.0 before 7.6.4
Showing 2