Security Advisories for @apollo/server in npm
Moderate
2 months ago
Apollo Server: Browser bug allows for bypass of XS-Search (read-only Cross-Site Request Forgery) prevention
npm
apollo-server-core, @apollo/server
High
4 months ago
Apollo Serve vulnerable to Denial of Service with `startStandaloneServer`
npm
@apollo/server, apollo-server
Low
almost 3 years ago
@apollo/server vulnerable to unsafe application of Content Security Policy via reused nonces
npm
@apollo/server
Moderate
over 3 years ago
Batched HTTP requests may set incorrect `cache-control` response header
npm
@apollo/server, apollo-server-core
Potential
Moderate
over 3 years ago
The graphql-upload library included in Apollo Server 2 is vulnerable to CSRF mutations
npm
apollo-server
Potential
Moderate
almost 4 years ago
apollo-server-core vulnerable to URL-based XSS attack affecting IE11 on default landing page
npm
apollo-server-core
Potential
High
over 4 years ago
Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)
npm
apollo-server
Potential
Moderate
almost 6 years ago
Introspection in schema validation in Apollo Server
npm
apollo-server-micro, apollo-server-lambda, apollo-server-koa, apollo-server-hapi, apollo-server-fastify, apollo-server-express, apollo-server-cloudflare, apollo-server-cloud-functions, apollo-server-core, apollo-server-cache-memcached, apollo-server-azure-functions, apollo-server
Potential