@apollo/query-planner vulnerabilities (Root)

2 vulnerabilities.

• @apollo/query-planner Root Apollo Federation has prototype pollution via incomplete key sanitization CVE-2026-32621 Public exploitFix available 9.9 CriticalMarch 13, 2026
• @apollo/query-planner Root Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries CVE-2024-43414 Fix available 7.5 HighAugust 27, 2024