@apollo/query-planner vulnerabilities (npm)

2 vulnerabilities.

• @apollo/query-planner npm Apollo Federation has prototype pollution via incomplete key sanitization CVE-2026-32621 Public exploitFix available 9.9 CriticalMarch 13, 2026
• @apollo/query-planner npm Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries CVE-2024-43414 Fix available 7.5 HighAugust 27, 2024