{
  "@id": "urn:uuid:74b87c60-7d56-4b7d-aac6-cdbe7dc475e7",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 1,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-24T14:00:18.395000+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.neo4j.driver/neo4j-java-driver-all@5.15.0-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.neo4j.driver/neo4j-java-driver-all@5.15.0-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-24T14:00:18.395000+00:00",
      "status_notes": "Vulnerability CVE-2024-34517 is a false positive for org.neo4j.driver:neo4j-java-driver-all 5.15.0-tuxcare.1. false_positive \u2014 CVE-2024-34517 describes a vulnerability in the Neo4j database server's Cypher privilege enforcement component. This repository is the Neo4j Java Driver (version 5.15.0), which is a client library that connects to Neo4j servers over the network. The driver does not contain any Cypher execution engine or privilege management code. This is a wrong-project match - the vulnerable component exists o...",
      "vulnerability": {
        "name": "CVE-2024-34517"
      },
      "impact_statement": "false_positive \u2014 CVE-2024-34517 describes a vulnerability in the Neo4j database server's Cypher privilege enforcement component. This repository is the Neo4j Java Driver (version 5.15.0), which is a client library that connects to Neo4j servers over the network. The driver does not contain any Cypher execution engine or privilege management code. This is a wrong-project match - the vulnerable component exists o..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.neo4j.driver/neo4j-java-driver-all@5.15.0-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.neo4j.driver/neo4j-java-driver-all@5.15.0-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-24T14:00:18.395000+00:00",
      "status_notes": "Vulnerability CVE-2026-1337 affects version 5.15.0-tuxcare.1 of org.neo4j.driver:neo4j-java-driver-all.",
      "vulnerability": {
        "name": "CVE-2026-1337"
      },
      "action_statement": "Vulnerability CVE-2026-1337 affects version 5.15.0-tuxcare.1 of org.neo4j.driver:neo4j-java-driver-all."
    }
  ]
}