{"action":"Upgrade org.neo4j.procedure:apoc to 4.3.0.7 (4.3.x) or 4.4.0.8 (4.4.x) or later.","affected":[{"fixed":"4.4.0.8","introduced":"4.4.0.0"},{"fixed":"4.3.0.7","introduced":"0"}],"component":"org.neo4j.procedure:apoc","cve_ids":["CVE-2022-37423"],"ecosystem":"Maven","epss":0.01435,"exploited":false,"fixed_versions":["4.4.0.8","4.3.0.7"],"ghsa_id":"GHSA-78f9-745f-278p","id":"tcs_01M5N8HWWSW9HNXJRT796RZDNB","modified_at":"2026-07-08T06:30:01.641702143Z","published_at":"2022-08-12T15:38:33Z","references":["https://osv.dev/vulnerability/GHSA-78f9-745f-278p","https://github.com/neo4j-contrib/neo4j-apoc-procedures/security/advisories/GHSA-78f9-745f-278p","https://nvd.nist.gov/vuln/detail/CVE-2022-37423","https://github.com/neo4j-contrib/neo4j-apoc-procedures/pull/3080","https://github.com/neo4j-contrib/neo4j-apoc-procedures/commit/d2f415c6f703bbc2cda4a753928821ff15d5c620","https://github.com/neo4j-contrib/neo4j-apoc-procedures/commit/fe9f8c77269f5a742585c1d62324eb70755de510","https://github.com/neo4j-contrib/neo4j-apoc-procedures","https://neo4j.com/docs/aura/platform/apoc"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-78f9-745f-278p","url":"https://osv.dev/vulnerability/GHSA-78f9-745f-278p"}],"summary":"Neo4j Graph apoc plugins Partial Path Traversal Vulnerability"}