{"action":"Upgrade mcp-neo4j-cypher to 0.4.0 or later.","affected":[{"fixed":"0.4.0","introduced":"0.2.2"}],"component":"mcp-neo4j-cypher","cve_ids":["CVE-2025-10193"],"ecosystem":"PyPI","epss":0.00221,"exploited":false,"fixed_versions":["0.4.0"],"ghsa_id":"GHSA-vcqx-v2mg-7chx","id":"tcs_01M5KGTPFBQ6ZMWPD327ER98WE","modified_at":"2026-07-07T17:47:03.417894824Z","published_at":"2026-07-07T16:03:04.888877Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1620","https://github.com/neo4j-contrib/mcp-neo4j/security/advisories/GHSA-vcqx-v2mg-7chx","https://nvd.nist.gov/vuln/detail/CVE-2025-10193","https://github.com/neo4j-contrib/mcp-neo4j/pull/165","https://github.com/neo4j-contrib/mcp-neo4j/commit/5b9fbdda6401668d7aa006daf7e644805c067c15","https://github.com/neo4j-contrib/mcp-neo4j","https://github.com/neo4j-contrib/mcp-neo4j/releases/tag/mcp-neo4j-cypher-v0.4.0","https://neo4j.com/security/cve-2025-10193","https://pypi.org/project/mcp-neo4j-cypher","https://github.com/advisories/GHSA-vcqx-v2mg-7chx"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"PYSEC-2026-1620","url":"https://osv.dev/vulnerability/PYSEC-2026-1620"},{"source":"nvd","source_id":"CVE-2025-10193","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10193"}],"summary":"Neo4j Cypher MCP server is vulnerable to DNS rebinding"}