{"action":"Upgrade org.neo4j:neo4j to 3.5.0 or later.","affected":[{"fixed":"3.5.0","introduced":"0"}],"component":"org.neo4j:neo4j","cve_ids":["CVE-2021-34371"],"ecosystem":"Maven","epss":0.13386,"exploited":false,"fixed_versions":["3.5.0"],"ghsa_id":"GHSA-pc4w-8v5j-29w9","id":"tcs_01M5N977DC1KHH4FV5ZSFYD7WE","modified_at":"2026-08-26T15:41:11.955326718Z","published_at":"2021-09-01T18:31:29Z","references":["https://osv.dev/vulnerability/GHSA-pc4w-8v5j-29w9","https://nvd.nist.gov/vuln/detail/CVE-2021-34371","https://github.com/neo4j/neo4j","https://www.exploit-db.com/exploits/50170"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-pc4w-8v5j-29w9","url":"https://osv.dev/vulnerability/GHSA-pc4w-8v5j-29w9"}],"summary":"Deserialization of Untrusted Data in Neo4j"}