- How many CVEs does neo4j-contrib have?
- neo4j-contrib has 6 published CVE records since 2022, including 2 in the last two years.
- How many neo4j-contrib CVEs are in CISA KEV?
- None of neo4j-contrib's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which neo4j-contrib products have the most CVEs?
- The neo4j-contrib products with the most published CVEs are neo4j-apoc-procedures, mcp-neo4j, mcp-neo4j-cypher, org.neo4j.procedure:apoc.
- What are the most common weakness types in neo4j-contrib CVEs?
- neo4j-contrib's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-284 (Improper Access Control), CWE-346 (Origin Validation Error), CWE-611 (Improper Restriction of XML External Entity Reference).
- Are there public exploits for neo4j-contrib vulnerabilities?
- Yes — 1 of neo4j-contrib's CVEs have a known public exploit.
- How many critical neo4j-contrib vulnerabilities are there?
- neo4j-contrib has 1 critical and 4 high-severity CVEs.
- What is the average severity of neo4j-contrib CVEs?
- The average CVSS base score across neo4j-contrib's scored CVEs is 6.9.