p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de mcp-neo4j-cypher

Vulnerabilidades publicadas para mcp-neo4j-cypher en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 2

  1. CVE-2026-35402

    Baja · CVSS 2.3EPSS 0,26%Corrección disponible

    mcp-neo4j-cypher: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures

    mcp-neo4j-cypher is an MCP server for executing Cypher queries against Neo4j databases. In versions prior to 0.6.0, the read_only mode enforcement can be bypassed using APOC CALL procedures, potentially allowing unauthorized write operations or server-side request forgery. This issue is fixed in version 0.6.0.

    mcp-neo4j-cypherPython
    • Actualiza a 0.6.0
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  2. CVE-2025-10193

    Alta · CVSS 7.4EPSS 0,22%Corrección disponible

    Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks

    DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend sufficient time there for DNS rebinding to succeed.

    mcp-neo4j-cypherPython
    • Actualiza a 0.4.0
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →