apollographql

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high19CVSS 7.0–8.9

Exploited now

apollographql records in CISA KEV

No apollographql vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Apollo Router 5 records MEDIUM Apollo Gateway 3 records MEDIUM Apollo Helms-charts Router 3 records MEDIUM Apollo-router 2 records MEDIUM Apollo Client 1 record LOW Apollo Mcp Server 1 record LOW Apollo Query-planner 1 record MEDIUM Apollo Server 1 record MEDIUM

Records

1 record in Apollo Mcp Server · all components

TI-2026-27681 CVE-2026-35577

Missing Host Header Validation in Apollo MCP Server for Localhost Deployments

LOW 36

Apollo MCP Server is a Model Context Protocol server that exposes GraphQL operations as MCP tools.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00189 Published 2026-04-09 Fixed in 1.7.0 CWE-346

Open these records in search →