apollographql

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high19CVSS 7.0–8.9

Exploited now

apollographql records in CISA KEV

No apollographql vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Apollo Router 5 records MEDIUM Apollo Gateway 3 records MEDIUM Apollo Helms-charts Router 3 records MEDIUM Apollo-router 2 records MEDIUM Apollo Client 1 record LOW Apollo Mcp Server 1 record LOW Apollo Query-planner 1 record MEDIUM Apollo Server 1 record MEDIUM

Records

1 record in Apollo Server · all components

TI-2026-19253 CVE-2026-23897 · GHSA-mp6q-xf9x-fwf7

Apollo Server is vulnerable to denial of service with `startStandaloneServer`

MEDIUM 40

Apollo Server is an open-source, spec-compliant GraphQL server that's compatible with any GraphQL client, including Apollo Client.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00689 Published 2026-02-04 Fixed in 4.13.0, 5.4.0 CWE-1333

Open these records in search →