- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 4 · 1 critical, 3 high
- Weekly downloads
- 398.7K
- Dependents
- 74
- Registry
- npm
Advisories 4
- CVE-2026-32621Critical 9.9
Apollo Federation has prototype pollution via incomplete key sanitization
Affected: fixed in 2.9.6; from 2.10.0, fixed in 2.10.5; from 2.11.0, fixed in 2.11.6; from 2.12.0, fixed in 2.12.3; from 2.13.0, fixed in 2.13.2.
- CVE-2025-32031High 7.5
Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass
Affected: fixed in 2.10.1.
- CVE-2025-32030High 7.5
Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion
Affected: fixed in 2.10.1.
- CVE-2024-43414High 7.5
Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries
Affected: from 2.0.0, fixed in 2.8.5.