HIGH7.3npm
GHSA-74cr-77xc-8g6rPrototype Pollution in @apollo/gateway
Modified: 8/16/2021
package
npm/@apollo/gateway
pkg:npm/%40apollo/gateway
HIGH7.5crates.ionpm
GHSA-fmj9-77q8-g6c4· CVE-2024-43414Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries
Modified: 9/13/2024
HIGH7.5npm
GHSA-p2q6-pwh5-m6jr· CVE-2025-32031Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass
Modified: 4/8/2025
CRITICAL9.9npm
GHSA-pfjj-6f4p-rvmh· CVE-2026-32621Apollo Federation vulnerable to prototype pollution via incomplete key sanitization
Modified: 3/19/2026
HIGH7.5npm
GHSA-q2f9-x4p4-7xmh· CVE-2025-32030Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion
Modified: 4/8/2025