Skip to content
OpenAdvisories

Package · npm

@apollo/explorer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2025-59845 Public exploit

    Apollo Embedded Sandbox and Explorer vulnerable to CSRF via window.postMessage origin-validation bypass

    Apollo Studio Embeddable Explorer & Embeddable Sandbox are website embeddable software solutions from Apollo GraphQL. Prior to Apollo Sandbox version 2.7.2 and Apollo Explorer version 3.7.3, a cross-site request forgery (CSRF) vulnerability was identified. Th…

    apollographql embeddable-explorer @apollo/explorer @apollo/sandbox npm