apollo-router (crates.io)
Advisories
21
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 2.12.1 or later clears every advisory below that has a fix.
Upgrade commands
cargo
cargo update -p apollo-router --precise 2.12.1Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-hff2-gcpx-8f4p Apollo Router Core: Browser Bug Enables Bypass of XS-Search Prevention via Read-Only Cross-Site Request Forgery |
Medium | >= 2.0.0, < 2.10.2 | 2.10.2 |
| GHSA-hff2-gcpx-8f4p Apollo Router Core: Browser Bug Enables Bypass of XS-Search Prevention via Read-Only Cross-Site Request Forgery |
Medium | < 1.61.13 | 1.61.13 |
| GHSA-hff2-gcpx-8f4p Apollo Router Core: Browser Bug Enables Bypass of XS-Search Prevention via Read-Only Cross-Site Request Forgery |
Medium | >= 2.11.0, < 2.12.1 | 2.12.1 |
| GHSA-x33c-7c2v-mrj9 Apollo Router Affected by an Access Control Bypass on Polymorphic Types |
High EPSS 0.34% |
< 1.61.12 | 1.61.12 |
| GHSA-x33c-7c2v-mrj9 Apollo Router Affected by an Access Control Bypass on Polymorphic Types |
High EPSS 0.34% |
>= 2.0.0-alpha.0, < 2.8.1 | 2.8.1 |
| GHSA-g8jh-vg5j-4h3f Apollo Router Improperly Enforces Renamed Access Control Directives |
High EPSS 0.33% |
>= 2.0.0-alpha.0, < 2.8.1 | 2.8.1 |
| GHSA-g8jh-vg5j-4h3f Apollo Router Improperly Enforces Renamed Access Control Directives |
High EPSS 0.33% |
< 1.61.12 | 1.61.12 |
| GHSA-3j43-9v8v-cp3f Apollo Router Query Validation Vulnerable to Excessive Resource Consumption via Named Fragment Processing |
High EPSS 0.57% |
>= 2.0.0-alpha.0, < 2.1.1 | 2.1.1 |
| GHSA-3j43-9v8v-cp3f Apollo Router Query Validation Vulnerable to Excessive Resource Consumption via Named Fragment Processing |
High EPSS 0.57% |
< 1.61.2 | 1.61.2 |
| GHSA-84m6-5m72-45fp Apollo Router Operation Limits Vulnerable to Bypass via Integer Overflow |
High EPSS 0.60% |
>= 2.0.0-alpha.0, < 2.1.1 | 2.1.1 |
| GHSA-84m6-5m72-45fp Apollo Router Operation Limits Vulnerable to Bypass via Integer Overflow |
High EPSS 0.60% |
< 1.61.2 | 1.61.2 |
| GHSA-75m2-jhh5-j5g2 Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion |
High EPSS 0.56% |
>= 2.0.0-alpha.0, < 2.1.1 | 2.1.1 |
| GHSA-75m2-jhh5-j5g2 Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion |
High EPSS 0.56% |
< 1.61.2 | 1.61.2 |
| GHSA-94hh-jmq8-2fgp Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass |
High EPSS 0.60% |
>= 2.0.0-alpha.0, < 2.1.1 | 2.1.1 |
| GHSA-94hh-jmq8-2fgp Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass |
High EPSS 0.60% |
< 1.61.2 | 1.61.2 |
| GHSA-x6xq-whh3-gg32 Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies |
High EPSS 0.86% |
>= 1.7.0, < 1.52.1 | 1.52.1 |
| GHSA-fmj9-77q8-g6c4 Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries |
High EPSS 0.99% |
< 1.52.1 | 1.52.1 |
| GHSA-q9p4-hw9m-fj2v Apollo Router vulnerable to Critical Regression In Query Plan Cache |
Critical EPSS 0.73% |
>= 1.44.0, < 1.45.1 | 1.45.1 |
| GHSA-cgqf-3cq5-wvcj Apollo Router's Compressed Payloads do not respect HTTP Payload Limits |
High EPSS 0.77% |
>= 0.9.5, < 1.40.2 | 1.40.2 |
| GHSA-r344-xw3p-2frj Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions |
High EPSS 0.87% |
>= 1.31.0, < 1.33.0 | 1.33.0 |
| GHSA-w8vq-3hf9-xppx Apollo Router Unnamed "Subscription" operation results in Denial-of-Service |
Medium EPSS 0.80% |
>= 1.28.0, < 1.29.1 | 1.29.1 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor