crates.io/apollo-router

Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries

Modified: 9/13/2024

Apollo Router Query Validation Vulnerable to Excessive Resource Consumption via Named Fragment Processing

Modified: 4/9/2025

Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion

Modified: 4/8/2025

Apollo Router Operation Limits Vulnerable to Bypass via Integer Overflow

Modified: 4/8/2025

Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass

Modified: 4/8/2025

Apollo Router's Compressed Payloads do not respect HTTP Payload Limits

Modified: 2/17/2026

Apollo Router Improperly Enforces Renamed Access Control Directives

Modified: 11/7/2025

Apollo Router Core: Browser Bug Enables Bypass of XS-Search Prevention via Read-Only Cross-Site Request Forgery

Modified: 3/26/2026

Apollo Router vulnerable to Critical Regression In Query Plan Cache

Modified: 9/10/2026

Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions

Modified: 9/10/2026

Apollo Router Unnamed "Subscription" operation results in Denial-of-Service

Modified: 9/10/2026

Apollo Router Affected by an Access Control Bypass on Polymorphic Types

Modified: 11/6/2025

Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies

Modified: 8/27/2024