Skip to content

neuron-core/neuron-ai vulnerabilities (Packagist)

2 vulnerabilities.

neuron-core/neuron-ai PackagistMySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)CVE-2025-67510Fix available9.4 CriticalDecember 9, 2025
neuron-core/neuron-ai PackagistMySQLSelectTool Read-Only Bypass via SELECT INTO OUTFILE Allows Arbitrary File WriteCVE-2025-67509Fix available8.2 HighDecember 9, 2025