Skip to content
OpenAdvisories

Package · npm

@apollo/server

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-23897

    Apollo Server is vulnerable to denial of service with `startStandaloneServer`

    Apollo Server is an open-source, spec-compliant GraphQL server that's compatible with any GraphQL client, including Apollo Client. In versions from 2.0.0 to 3.13.0, 4.2.0 to before 4.13.0, and 5.0.0 to before 5.4.0, the default configuration of startStandalon…

    apollographql apollo-server @apollo/server apollo-server npm