Apollographql
20 CVEs across 15 Apollographql products. Browse Apollographql vulnerabilities, severities, and proof-of-concept exploits.
Apollographql products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-35577 | Medium | 6.8 | 2026-04-09 | Apollo MCP Server is a Model Context Protocol server that exposes GraphQL operations as MCP tools. Prior to version 1.7.0, the Apollo MCP Server did not valida… |
CVE-2026-23897 | High | 7.5 | 2026-02-04 | Apollo Server is an open-source, spec-compliant GraphQL server that's compatible with any GraphQL client, including Apollo Client. In versions from 2.0.0 to 3… |
CVE-2025-64530 | High | 7.5 | 2025-11-13 | Apollo Federation is an architecture for declaratively composing APIs into a unified graph. A vulnerability in versions of Apollo Federation's composition logi… |
CVE-2025-64347 | High | 7.5 | 2025-11-07 | Apollo Router Core is a configurable Rust graph router written to run a federated supergraph using Apollo Federation 2. Versions 1.61.12-rc.0 and below and 2.8… |
CVE-2025-64173 | High | 7.5 | 2025-11-06 | Apollo Router Core is a configurable graph router written in Rust to run a federated supergraph using Apollo Federation 2. In versions 1.61.11 below, as well a… |
CVE-2025-59845 | High | 8.2 | 2025-09-26 | Apollo Studio Embeddable Explorer & Embeddable Sandbox are website embeddable software solutions from Apollo GraphQL. Prior to Apollo Sandbox version 2.7.2 and… |
CVE-2025-32380 | High | 7.5 | 2025-04-09 | The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. A vulnerab… |
CVE-2025-32034 | High | 7.5 | 2025-04-07 | The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Prior to 1… |
CVE-2025-32033 | High | 7.5 | 2025-04-07 | The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Prior to 1… |
CVE-2025-32032 | High | 7.5 | 2025-04-07 | The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. A vulnerab… |
CVE-2025-32031 | High | 7.5 | 2025-04-07 | Apollo Gateway provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint. Prior to 2.10.1, a vulnerability in Apollo Gatew… |
CVE-2025-32030 | High | 7.5 | 2025-04-07 | Apollo Gateway provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint. Prior to 2.10.1, a vulnerability in Apollo Gatew… |
CVE-2025-31496 | High | 7.5 | 2025-04-07 | apollo-compiler is a query-based compiler for the GraphQL query language. Prior to 1.27.0, a vulnerability in Apollo Compiler allowed queries with deeply neste… |
CVE-2024-43783 | High | 7.5 | 2024-08-27 | The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Instances… |
CVE-2024-43414 | High | 7.5 | 2024-08-27 | Apollo Federation is an architecture for declaratively composing APIs into a unified graph. Each team can own their slice of the graph independently, empowerin… |
CVE-2024-32971 | Critical | 9.0 | 2024-05-02 | Apollo Router is a configurable, graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. The affected versions of Apollo Rout… |
CVE-2024-28101 | High | 7.5 | 2024-03-21 | The Apollo Router is a graph router written in Rust to run a federated supergraph that uses Apollo Federation. Versions 0.9.5 until 1.40.2 are subject to a Den… |
CVE-2024-23841 | High | 8.2 | 2024-01-30 | apollo-client-nextjs is the Apollo Client support for the Next.js App Router. The @apollo/experimental-apollo-client-nextjs NPM package is vulnerable to a cros… |
CVE-2023-45812 | High | 7.5 | 2023-10-18 | The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions… |
CVE-2023-41317 | High | 7.5 | 2023-09-05 | The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Affected versio… |