Neo4j
1 CVEs
product
Monthly
Neo4J versions up to 2026.01 contains a vulnerability that allows attackers to XSS if the user opens the logs in a tool that treats them as HTML (CVSS 5.4).
Github
XSS
Neo4j
NVD
GitHub
CVSS 3.1
5.4
EPSS
0.0%
CVE-2026-1337
EPSS 0%
CVSS 5.4
MEDIUM
POC
PATCH
This Month
Neo4J versions up to 2026.01 contains a vulnerability that allows attackers to XSS if the user opens the logs in a tool that treats them as HTML (CVSS 5.4).
Github
XSS
Neo4j
NVD
GitHub