apollographql/federation Security Advisories | GitStock

critical2026-03-13

Apollo Federation vulnerable to prototype pollution via incomplete key sanitization

GHSA-pfjj-6f4p-rvmh · CVE-2026-32621

high2025-11-14

Apollo Federation has Improper Enforcement of Access Control on Transitive Fields

GHSA-m8jr-fxqx-8xx6

high2025-11-14

@apollo/composition has Improper Enforcement of Access Control on Interface Types and Fields

GHSA-mx7m-j9xf-62hw · CVE-2025-64530

high2025-04-07

Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass

GHSA-p2q6-pwh5-m6jr · CVE-2025-32031

high2025-04-07

Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion

GHSA-q2f9-x4p4-7xmh · CVE-2025-32030

high2024-08-27

Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries

GHSA-fmj9-77q8-g6c4 · CVE-2024-43414