Vulnerability Reportneo4j:2026.10.2

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The main concerns are CVE-2026-95619 in the C++ runtime and CVE-2026-89407 in the bundled Jackson library, both of which mainly risk crashes or slowdowns rather than data theft or remote code execution. Whether either one applies depends on whether Neo4j actually passes large inputs through those code paths, which the scan could not confirm. None of the findings are known to be actively exploited, and the scan found 143 vulnerabilities in total, so updating the base packages and the Jackson library in the next image rebuild is the practical next step.