neo4j-5.26
neo4j
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
The fix for GHSA-xr72-g735-4vwp (insufficient escaping of unicode characters in query log) is available in org.neo4j:neo4j 2026.01. Neo4j 5.26 is a Long Term Support release (supported until 03 Feb 2027 per https://endoflife.date/neo4j) but no 5.26.x release containing this fix has been published upstream.
Fix version: org.neo4j:neo4j 2026.01 Upstream advisory: https://github.com/advisories/GHSA-xr72-g735-4vwp
Status