package

npm/apollo-server

pkg:npm/apollo-server

MEDIUMnpm

The graphql-upload library included in Apollo Server 2 is vulnerable to CSRF mutations

Modified: 7/31/2023

HIGH7.5npm

Apollo Serve vulnerable to Denial of Service with `startStandaloneServer`

Modified: 2/4/2026

HIGHnpm

Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)

Modified: 11/4/2021

MEDIUMnpm

Introspection in schema validation in Apollo Server

Modified: 8/31/2020