{"action":"Upgrade org.neo4j.procedure:apoc to 4.4.0.14 (4.x) or 5.5.0 (5.x) or later.","affected":[{"fixed":"4.4.0.14","introduced":"0"},{"fixed":"5.5.0","introduced":"5.0.0"}],"component":"org.neo4j.procedure:apoc","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":["4.4.0.14","5.5.0"],"ghsa_id":"GHSA-9vx8-f5c4-862x","id":"tcs_01M5N8QX1ZBZS691WZWW7WHAGD","modified_at":"2024-11-28T05:39:38.646997Z","published_at":"2023-02-24T17:39:18Z","references":["https://osv.dev/vulnerability/GHSA-9vx8-f5c4-862x","https://github.com/neo4j-contrib/neo4j-apoc-procedures/security/advisories/GHSA-9vx8-f5c4-862x","https://github.com/neo4j/apoc/security/advisories/GHSA-6wxg-wh7f-rqpr","https://nvd.nist.gov/vuln/detail/CVE-2023-23926","https://github.com/neo4j-contrib/neo4j-apoc-procedures/commit/c3e2a29020497acf9417879f38e8af4e8c6d5783","https://github.com/neo4j-contrib/neo4j-apoc-procedures","https://github.com/neo4j-contrib/neo4j-apoc-procedures/releases/tag/4.4.0.14"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-9vx8-f5c4-862x","url":"https://osv.dev/vulnerability/GHSA-9vx8-f5c4-862x"}],"summary":"XML External Entity (XXE) vulnerability in apoc.import.graphml"}