Skip to main content
← npm

@apollo/federation-internals

1 known vulnerability (1 critical), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
1 · 1 critical
Weekly downloads
1.2M
Dependents
140
Registry
npm

Advisories 1

  • CVE-2026-32621Critical 9.9

    Apollo Federation has prototype pollution via incomplete key sanitization

    Affected: fixed in 2.9.6; from 2.10.0, fixed in 2.10.5; from 2.11.0, fixed in 2.11.6; from 2.12.0, fixed in 2.12.3; from 2.13.0, fixed in 2.13.2.