Security
فارسی
All products

apollo-router

Rust / Cargo · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apollo Router vulnerable to Critical Regression In Query Plan CacheCVE-2024-32971 · GHSA-Q9P4-HW9M-FJ2V apollo-router Rust / Cargo Critical Fix reported
Apollo Router Unnamed "Subscription" operation results in Denial-of-ServiceCVE-2023-41317 · GHSA-W8VQ-3HF9-XPPX apollo-router Rust / Cargo Medium Fix reported
Apollo Router vulnerable to Improper Check or Handling of Exceptional ConditionsCVE-2023-45812 · GHSA-R344-XW3P-2FRJ apollo-router Rust / Cargo High Fix reported
Apollo Router Core: Browser Bug Enables Bypass of XS-Search Prevention via Read-Only Cross-Site Request ForgeryGHSA-HFF2-GCPX-8F4P apollo-router Rust / Cargo Medium Fix reported
Apollo Router's Compressed Payloads do not respect HTTP Payload LimitsCVE-2024-28101 · GHSA-CGQF-3CQ5-WVCJ apollo-router Rust / Cargo High Fix reported
Apollo Router Improperly Enforces Renamed Access Control DirectivesCVE-2025-64347 · GHSA-G8JH-VG5J-4H3F apollo-router Rust / Cargo High Fix reported
Apollo Router Affected by an Access Control Bypass on Polymorphic TypesCVE-2025-64173 · GHSA-X33C-7C2V-MRJ9 apollo-router Rust / Cargo High Fix reported
Apollo Router Query Validation Vulnerable to Excessive Resource Consumption via Named Fragment ProcessingCVE-2025-32380 · GHSA-3J43-9V8V-CP3F apollo-router Rust / Cargo High Fix reported
Apollo Router Operation Limits Vulnerable to Bypass via Integer OverflowCVE-2025-32033 · GHSA-84M6-5M72-45FP apollo-router Rust / Cargo High Fix reported
Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment ExpansionCVE-2025-32034 · GHSA-75M2-JHH5-J5G2 apollo-router Rust / Cargo High Fix reported
Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Optimization BypassCVE-2025-32032 · GHSA-94HH-JMQ8-2FGP apollo-router Rust / Cargo High Fix reported
Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queriesCVE-2024-43414 · GHSA-FMJ9-77Q8-G6C4 apollo-router@apollo/gateway Rust / Cargonpm High Fix reported
Apollo Router Coprocessors may cause Denial-of-Service when handling request bodiesCVE-2024-43783 · GHSA-X6XQ-WHH3-GG32 apollo-router Rust / Cargo High Fix reported