CVE-2026-35402
2 advisories.
PyPI/mcp-neo4j-cypher CVE-2026-35402: low
Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures
Action: Upgrade mcp-neo4j-cypher to 0.6.0 or later.
pip install mcp-neo4j-cypher==0.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.0 | - |
Fixed versions
| 0.6.0 |
Sources
- osv: GHSA-x3cv-r3g3-fpg9
- https://github.com/neo4j-contrib/mcp-neo4j/security/advisories/GHSA-x3cv-r3g3-fpg9
- https://nvd.nist.gov/vuln/detail/CVE-2026-35402
- https://github.com/neo4j-contrib/mcp-neo4j
- https://github.com/neo4j-contrib/mcp-neo4j/releases/tag/mcp-neo4j-cypher-v0.6.0
CVE-2026-35402 · published · modified · JSON
PyPI/mcp-neo4j-cypher CVE-2026-35402: unknown
Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures
Action: Upgrade mcp-neo4j-cypher to 0.6.0 or later.
pip install mcp-neo4j-cypher==0.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.0 | - |
Fixed versions
| 0.6.0 |
Sources
- osv: PYSEC-2026-2626
- https://github.com/neo4j-contrib/mcp-neo4j/security/advisories/GHSA-x3cv-r3g3-fpg9
- https://nvd.nist.gov/vuln/detail/CVE-2026-35402
- https://github.com/neo4j-contrib/mcp-neo4j
- https://github.com/neo4j-contrib/mcp-neo4j/releases/tag/mcp-neo4j-cypher-v0.6.0
- https://pypi.org/project/mcp-neo4j-cypher
- https://github.com/advisories/GHSA-x3cv-r3g3-fpg9
CVE-2026-35402 · published · modified · JSON