Skip to content
OpenAdvisories

Package · npm

@apollo/server

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low —
    GHSA-j5g3-5c8r-7qfx

    Prevent logging invalid header values

    ## Impact ### What kind of vulnerability is it? Apollo Server can log sensitive information (Studio API keys) if they are passed incorrectly (with leading/trailing whitespace) or if they have any characters that are invalid as part of a header value. ### Who …

    @apollo/server apollo-server-core npm
  • Low —
    GHSA-68jh-rf6x-836f

    @apollo/server vulnerable to unsafe application of Content Security Policy via reused nonces

    ### Context Content Security Policies (CSP) are a defense-in-depth strategy against XSS attacks. Improper application of CSP isn't itself a vulnerability, but it does fail to prevent XSS in the event that there is a viable attack vector for an XSS attack. ###…

    @apollo/server npm