{"action":"Upgrade mcp-neo4j-cypher to 0.4.0 or later.","affected":[{"fixed":"0.4.0","introduced":"0.2.2"}],"component":"mcp-neo4j-cypher","cve_ids":["CVE-2025-10193"],"ecosystem":"PyPI","epss":0.00221,"exploited":false,"fixed_versions":["0.4.0"],"ghsa_id":"GHSA-vcqx-v2mg-7chx","id":"tcs_01M5KFZYGVZ8N35TEQGGARFGHE","modified_at":"2026-07-07T17:57:31.232871022Z","published_at":"2025-09-11T23:26:00Z","references":["https://osv.dev/vulnerability/GHSA-vcqx-v2mg-7chx","https://github.com/neo4j-contrib/mcp-neo4j/security/advisories/GHSA-vcqx-v2mg-7chx","https://nvd.nist.gov/vuln/detail/CVE-2025-10193","https://github.com/neo4j-contrib/mcp-neo4j/pull/165","https://github.com/neo4j-contrib/mcp-neo4j/commit/5b9fbdda6401668d7aa006daf7e644805c067c15","https://github.com/neo4j-contrib/mcp-neo4j","https://github.com/neo4j-contrib/mcp-neo4j/releases/tag/mcp-neo4j-cypher-v0.4.0","https://neo4j.com/security/cve-2025-10193"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-vcqx-v2mg-7chx","url":"https://osv.dev/vulnerability/GHSA-vcqx-v2mg-7chx"},{"source":"nvd","source_id":"CVE-2025-10193","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10193"}],"summary":"Neo4j Cypher MCP server is vulnerable to DNS rebinding"}