package

npm/@apollo/server

pkg:npm/%40apollo/server

LOWnpm

@apollo/server vulnerable to unsafe application of Content Security Policy via reused nonces

Modified: 6/20/2023

MEDIUMnpm

Batched HTTP requests may set incorrect `cache-control` response header

Modified: 11/2/2022

MEDIUMnpm

Apollo Server: Browser bug allows for bypass of XS-Search (read-only Cross-Site Request Forgery) prevention

Modified: 3/26/2026

LOWnpm

Prevent logging invalid header values

Modified: 8/30/2023

HIGH7.5npm

Apollo Serve vulnerable to Denial of Service with `startStandaloneServer`

Modified: 2/4/2026