{"action":"Upgrade org.neo4j:neo4j-cypher to 5.19.0 or later.","affected":[{"fixed":"5.19.0","introduced":"5.0.0"}],"component":"org.neo4j:neo4j-cypher","cve_ids":["CVE-2024-34517"],"ecosystem":"Maven","epss":0.00631,"exploited":false,"fixed_versions":["5.19.0"],"ghsa_id":"GHSA-p343-9qwp-pqxv","id":"tcs_01M5N969HXJXJMDH5YMXKAGAXG","modified_at":"2026-08-26T15:40:52.648430432Z","published_at":"2024-05-07T18:30:34Z","references":["https://osv.dev/vulnerability/GHSA-p343-9qwp-pqxv","https://nvd.nist.gov/vuln/detail/CVE-2024-34517","https://github.com/advisories/GHSA-p343-9qwp-pqxv","https://github.com/neo4j/neo4j","https://github.com/neo4j/neo4j/wiki/Neo4j-5-changelog#cypher","https://neo4j.com/security/cve-2024-34517","https://trust.neo4j.com"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-p343-9qwp-pqxv","url":"https://osv.dev/vulnerability/GHSA-p343-9qwp-pqxv"}],"summary":"Neo4j Cypher component mishandles IMMUTABLE privileges"}