Found a security issue you want to share with us? Please follow the steps located in our responsible disclosure policy: https://neo4j.com/trust-center/responsible-disclosure/
Repository navigation
Security: neo4j/graphql
Security
SECURITY.md
-
Authorization relationship and connection filters invert "none" quantifierGHSA-h873-p2wr-fjx6 published
Oct 12, 2026 by rissetHigh -
schema-level and type-level @authentication annotations not enforced on top-level @cypher fieldsGHSA-8xj4-8gg9-fx9h published
Oct 12, 2026 by rissetHigh -
Privilege Escalation via Dropped Field-Level @authentication on Root Custom-Resolver Fields in @neo4j/graphqlGHSA-82m8-p9px-c3x5 published
Aug 18, 2026 by rissetHigh -
Subscription Authentication Bypass via Unverified `connectionParams.jwt` in @neo4j/graphqlGHSA-fcpg-3fw5-vc65 published
Aug 6, 2026 by Liam-DoodsonHigh
Learn more about advisories related to neo4j/graphql in the GitHub Advisory Database