apollo-router vulnerabilities (crates.io)
13 vulnerabilities.
-
apollo-routercrates.io Apollo Router Core: Browser Bug Enables Bypass of XS-Search Prevention via Read-Only Cross-Site Request Forgery 6.3 Medium -
apollo-routercrates.io Apollo Router Core: Access Control Bypass on Polymorphic Types 7.5 High -
apollo-routercrates.io Apollo Router Improperly Enforces Renamed Access Control Directives 7.5 High -
apollo-routercrates.io Apollo Router Query Validation Vulnerable to Excessive Resource Consumption via Named Fragment Processing 7.5 High -
apollo-routercrates.io Apollo Router Operation Limits Vulnerable to Bypass via Integer Overflow 7.5 High -
apollo-routercrates.io Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion 7.5 High -
apollo-routercrates.io Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass 7.5 High -
apollo-routercrates.io Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries 7.5 High -
apollo-routercrates.io Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies 7.5 High -
apollo-routercrates.io Defect in query plan cache may cause incorrect operations to be executed in Apollo Router 9.1 Critical -
apollo-routercrates.io Apollo Router's Compressed Payloads do not respect HTTP Payload Limits 7.5 High -
apollo-routercrates.io Improper Check or Handling of Exceptional Conditions in apollo-router 7.5 High -
apollo-routercrates.io Unnamed "Subscription" operation results in Denial-of-Service in apollographql/router 7.5 High