{"action":"Upgrade org.neo4j:neo4j to 2026.01 or later.","affected":[{"fixed":"2026.01","introduced":"0"}],"component":"org.neo4j:neo4j","cve_ids":["CVE-2026-1337"],"ecosystem":"Maven","epss":0.00249,"exploited":false,"fixed_versions":["2026.01"],"ghsa_id":"GHSA-xr72-g735-4vwp","id":"tcs_01M5N9JWKT7R05EENHC5KBWTZC","modified_at":"2026-09-10T03:50:36.168487833Z","published_at":"2026-02-06T15:31:03Z","references":["https://osv.dev/vulnerability/GHSA-xr72-g735-4vwp","https://nvd.nist.gov/vuln/detail/CVE-2026-1337","https://github.com/JoakimBulow/CVE-2026-1337","https://github.com/neo4j/neo4j"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-xr72-g735-4vwp","url":"https://osv.dev/vulnerability/GHSA-xr72-g735-4vwp"},{"source":"nvd","source_id":"CVE-2026-1337","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1337"}],"summary":"Neo4j Enterprise and Community editions have insufficient escaping of unicode characters in query log"}