apollographql vulnerabilities

Missing Host Header Validation in Apollo MCP Server for Localhost Deployments

apollographql · apollo-mcp-server

Apollo Server is vulnerable to denial of service with `startStandaloneServer`

apollographql · apollo-server

@apollo/composition has Improper Enforcement of Access Control on Interface Types and Fields

apollographql · federation

Apollo Router Improperly Enforces Renamed Access Control Directives

apollographql · router

Apollo Router Core: Access Control Bypass on Polymorphic Types

apollographql · router

Apollo Embedded Sandbox and Explorer vulnerable to CSRF via window.postMessage origin-validation bypass

apollographql · embeddable-explorer

Apollo Router Query Validation Vulnerable to Excessive Resource Consumption via Named Fragment Processing

apollographql · router

Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion

apollographql · router

Apollo Router Operation Limits Vulnerable to Bypass via Integer Overflow

apollographql · router

Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass

apollographql · router