Skip to contentApollographql Router vulnerabilities
- apollographql routerApollo Router Core: Access Control Bypass on Polymorphic TypesCVE-2025-64173Fix available7.5 High
- apollographql routerApollo Router Improperly Enforces Renamed Access Control DirectivesCVE-2025-64347Fix available7.5 High
- apollographql routerApollo Router Query Validation Vulnerable to Excessive Resource Consumption via Named Fragment ProcessingCVE-2025-32380Fix available7.5 High
- apollographql routerApollo Router Operation Limits Vulnerable to Bypass via Integer OverflowCVE-2025-32033Fix available7.5 High
- apollographql routerApollo Router Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment ExpansionCVE-2025-32034Fix available7.5 High
- apollographql routerApollo Router Query Planner Vulnerable to Excessive Resource Consumption via Optimization BypassCVE-2025-32032Fix available7.5 High
- apollographql apollo gateway, apollo router, federation +3 more +5 moreApollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queriesCVE-2024-43414Fix available7.5 High
- apollographql apollo router, router, apollo-router +1 more +3 moreApollo Router Coprocessors may cause Denial-of-Service when handling request bodiesCVE-2024-43783Fix available7.5 High
- apollographql apollo router, router +1 moreDefect in query plan cache may cause incorrect operations to be executed in Apollo RouterCVE-2024-32971Fix available9.1 Critical
- apollographql apollo router, router +1 moreApollo Router's Compressed Payloads do not respect HTTP Payload LimitsCVE-2024-28101Fix available7.5 High
- apollographql apollo router, router, apollo helms-charts router +2 moreImproper Check or Handling of Exceptional Conditions in apollo-routerCVE-2023-45812Fix available7.5 High
- apollographql apollo router, router +1 moreUnnamed "Subscription" operation results in Denial-of-Service in apollographql/routerCVE-2023-41317Fix available7.5 High