What’s Vulnerable › Products
apollographql router vulnerabilities
12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your apollographql router version is affected
Latest apollographql router vulnerabilities
- CVE-2025-64347 — Apollo Router Improperly Enforces Renamed Access Control Directives (CVSS 7.5)
- CVE-2025-64173 — Apollo Router Core: Access Control Bypass on Polymorphic Types (CVSS 7.5)
- CVE-2025-32380 — Apollo Router Query Validation Vulnerable to Excessive Resource Consumption via Named Fragment Processing (CVSS 7.5)
- CVE-2025-32034 — Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion (CVSS 7.5)
- CVE-2025-32033 — Apollo Router Operation Limits Vulnerable to Bypass via Integer Overflow (CVSS 7.5)
- CVE-2025-32032 — Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass (CVSS 7.5)
- CVE-2024-43783 — Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies (CVSS 7.5)
- CVE-2024-43414 — Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries (CVSS 7.5)
- CVE-2024-32971 — Defect in query plan cache may cause incorrect operations to be executed in Apollo Router (CVSS 9.0)
- CVE-2024-28101 — Apollo Router's Compressed Payloads do not respect HTTP Payload Limits (CVSS 7.5)
- CVE-2023-45812 — Improper Check or Handling of Exceptional Conditions in apollo-router (CVSS 7.5)
- CVE-2023-41317 — Unnamed "Subscription" operation results in Denial-of-Service in apollographql/router (CVSS 5.9)