@apollo/server vulnerabilities (Root)

2 vulnerabilities.

• @apollo/server Root Apollo Server: Browser bug allows for bypass of XS-Search (read-only Cross-Site Request Forgery) prevention GHSA-9q82-xgwf-vj6h Fix available 6.3 MediumMarch 26, 2026
• @apollo/server Root Apollo Server is vulnerable to denial of service with `startStandaloneServer` CVE-2026-23897 Fix available 7.5 HighFebruary 4, 2026