https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 09:03:37 +0000 https://cve.radiocsirt.org/vuln/bit-neo4j-2026-1337 <p><strong>Affected:</strong> Bitnami: neo4j</p> <p>Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML. There is no security impact on Neo4j products, but this advisory is released as a precaution to treat the logs as plain text if using versions prior to 2026.01.</p> <p>Proof of concept exploit:  https://github.com/JoakimBulow/CVE-2026-1337</p> <p><strong>Affected:</strong> Bitnami: neo4j</p> <p>Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML. There is no security impact on Neo4j products, but this advisory is released as a precaution to treat the logs as plain text if using versions prior to 2026.01.</p> <p>Proof of concept exploit:  https://github.com/JoakimBulow/CVE-2026-1337</p> https://cve.radiocsirt.org/vuln/bit-neo4j-2026-1337 https://cve.radiocsirt.org/vuln/euvd-2026-267525 EUVD-2026-267525 https://cve.radiocsirt.org/vuln/euvd-2026-267525 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1337 <p>Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML. There is no security impact on Neo4j products, but this advisory is released as a precaution to treat the logs as plain text if using versions prior to 2026.01.</p> <p>Proof of concept exploit:  https://github.com/JoakimBulow/CVE-2026-1337</p> <p>Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML. There is no security impact on Neo4j products, but this advisory is released as a precaution to treat the logs as plain text if using versions prior to 2026.01.</p> <p>Proof of concept exploit:  https://github.com/JoakimBulow/CVE-2026-1337</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-1337 https://cve.radiocsirt.org/vuln/ghsa-xr72-g735-4vwp <p><strong>Affected:</strong> Maven: org.neo4j:neo4j</p> <p>Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML. There is no security impact on Neo4j products, but this advisory is released as a precaution to treat the logs as plain text if using versions prior to 2026.01.</p> <p>Proof of concept exploit:  https://github.com/JoakimBulow/CVE-2026-1337</p> <p><strong>Affected:</strong> Maven: org.neo4j:neo4j</p> <p>Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML. There is no security impact on Neo4j products, but this advisory is released as a precaution to treat the logs as plain text if using versions prior to 2026.01.</p> <p>Proof of concept exploit:  https://github.com/JoakimBulow/CVE-2026-1337</p> https://cve.radiocsirt.org/vuln/ghsa-xr72-g735-4vwp