Skip to content
OpenAdvisories

Package · crates.io

apollo-router

13 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium —

    Apollo Router Core: Browser Bug Enables Bypass of XS-Search Prevention via Read-Only Cross-Site Request Forgery

    ### Impact In a Cross-Site Request Forgery attack, untrusted web content causes browsers to send authenticated requests to web servers which use cookies for authentication. While the web content is prevented from reading the request's response due to the Cros…