Vulnerabilities

TI-2025-23155 CVE-2025-32031 · GHSA-p2q6-pwh5-m6jr

Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass

MEDIUM 40

Apollo Gateway provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00603 Published 2025-04-07 Fixed in 2.10.1 CWE-770

TI-2025-23154 CVE-2025-32030 · GHSA-q2f9-x4p4-7xmh

LOW 39

Apollo Gateway provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00531 Published 2025-04-07 Fixed in 2.10.1 CWE-770

TI-2024-29063 CVE-2024-43414 · GHSA-fmj9-77q8-g6c4

MEDIUM 41

Apollo Federation is an architecture for declaratively composing APIs into a unified graph.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00988 Published 2024-08-27 Fixed in 2.8.5, 1.52.1 CWE-674