- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 12 · 1 critical, 11 high
- Weekly downloads
- 1,559
- Dependents
- 0
- Registry
- crates.io
Advisories 12
- CVE-2025-64347High 7.5
Apollo Router Improperly Enforces Renamed Access Control Directives
Affected: fixed in 1.61.12; from 2.0.0-alpha.0, fixed in 2.8.1.
- CVE-2025-64173High 7.5
Apollo Router Core: Access Control Bypass on Polymorphic Types
Affected: fixed in 1.61.12; from 2.0.0-alpha.0, fixed in 2.8.1.
- CVE-2025-32380High 7.5
Apollo Router Query Validation Vulnerable to Excessive Resource Consumption via Named Fragment Processing
Affected: fixed in 1.61.2; from 2.0.0-alpha.0, fixed in 2.1.1.
- CVE-2025-32034High 7.5
Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion
Affected: fixed in 1.61.2; from 2.0.0-alpha.0, fixed in 2.1.1.
- CVE-2025-32033High 7.5
Apollo Router Operation Limits Vulnerable to Bypass via Integer Overflow
Affected: fixed in 1.61.2; from 2.0.0-alpha.0, fixed in 2.1.1.
- CVE-2025-32032High 7.5
Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass
Affected: fixed in 1.61.2; from 2.0.0-alpha.0, fixed in 2.1.1.
- CVE-2024-43414High 7.5
Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries
Affected: fixed in 1.52.1.
- CVE-2024-43783High 7.5
Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies
Affected: from 1.7.0, fixed in 1.52.1.
- CVE-2024-32971Critical 9.1
Defect in query plan cache may cause incorrect operations to be executed in Apollo Router
Affected: from 1.44.0, fixed in 1.45.1.
- CVE-2024-28101High 7.5
Apollo Router's Compressed Payloads do not respect HTTP Payload Limits
Affected: from 0.9.5, fixed in 1.40.2.
- CVE-2023-45812High 7.5
Improper Check or Handling of Exceptional Conditions in apollo-router
Affected: from 1.31.0, fixed in 1.33.0.
- CVE-2023-41317High 7.5
Unnamed "Subscription" operation results in Denial-of-Service in apollographql/router
Affected: from 1.28.0, fixed in 1.29.1.