Database
Neo4j: supported versions and open vulnerabilities today
Neo4j 2026.09 and 5.26 are supported; 2026.08 reached end of life on Sep 21, 2026; the latest release is 2026.09.0. No high or critical advisories for Neo4j were published in the last 12 months (2 lower-severity); none of its advisories is on CISA’s list of exploited vulnerabilities.
Last checked against endoflife.date, OSV.dev, CISA KEV and deps.dev.
- Latest release
- 2026.09.0
- GitHub stars
- 17.3k
- Licence
- GPL-3.0
- OpenSSF Scorecard
- 4.4 / 10
Supported versions
Security advisories
2 advisories published in the last 12 months. 4 in total since records began. Checked packages: org.neo4j:neo4j.
Maintenance and supply chain
OpenSSF Scorecard 4.4 / 10 (scored )
The Scorecard rates the repository’s security practices, not known vulnerabilities. Recent activity: 30 commits and 0 issue updates found in the last 90 days.
Weakest checks
- Little code review (Code-Review 0/10)
- Unpinned build dependencies (Pinned-Dependencies 0/10)
- No static analysis (SAST 0/10)
Docs and release notes
Check Neo4j in your own stack
This page checks Neo4j in general. Your repo pins specific versions: the free dependency check reads your manifests and lists what to fix first. Prism Agent runs the same live checks on your whole stack and turns them into a plan your coding agent can build.