apollographql/router Security Advisories | GitStock

medium2026-03-26

Apollo Router Core: Browser Bug Enables Bypass of XS-Search Prevention via Read-Only Cross-Site Request Forgery

GHSA-hff2-gcpx-8f4p

high2025-11-06

Apollo Router Affected by an Access Control Bypass on Polymorphic Types

GHSA-x33c-7c2v-mrj9 · CVE-2025-64173

high2025-11-06

Apollo Router Improperly Enforces Renamed Access Control Directives

GHSA-g8jh-vg5j-4h3f · CVE-2025-64347

high2025-04-07

Apollo Router Query Validation Vulnerable to Excessive Resource Consumption via Named Fragment Processing

GHSA-3j43-9v8v-cp3f · CVE-2025-32380

high2025-04-07

Apollo Router Operation Limits Vulnerable to Bypass via Integer Overflow

GHSA-84m6-5m72-45fp · CVE-2025-32033

high2025-04-07

Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion

GHSA-75m2-jhh5-j5g2 · CVE-2025-32034

high2025-04-07

Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass

GHSA-94hh-jmq8-2fgp · CVE-2025-32032

high2024-08-27

Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies

GHSA-x6xq-whh3-gg32 · CVE-2024-43783

critical2024-05-02

Apollo Router vulnerable to Critical Regression In Query Plan Cache

GHSA-q9p4-hw9m-fj2v · CVE-2024-32971

high2024-03-06

Apollo Router's Compressed Payloads do not respect HTTP Payload Limits

GHSA-cgqf-3cq5-wvcj · CVE-2024-28101

high2023-10-19

Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions

GHSA-r344-xw3p-2frj · CVE-2023-45812

medium2023-09-07

Apollo Router Unnamed "Subscription" operation results in Denial-of-Service

GHSA-w8vq-3hf9-xppx · CVE-2023-41317