@apollo/sandbox vulnerabilities (npm)

1 vulnerability.

• @apollo/sandbox npm Apollo Embedded Sandbox and Explorer vulnerable to CSRF via window.postMessage origin-validation bypass CVE-2025-59845 Fix available 8.2 HighSeptember 26, 2025