Skip to content
OpenAdvisories

Package · npm

@apollo/server

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    GHSA-9q82-xgwf-vj6h

    Apollo Server: Browser bug allows for bypass of XS-Search (read-only Cross-Site Request Forgery) prevention

    # Impact In a Cross-Site Request Forgery attack, untrusted web content causes browsers to send authenticated requests to web servers which use cookies for authentication. While the web content is prevented from reading the request's response due to the Cross-…

    apollo-server-core @apollo/server npm
  • Medium —
    GHSA-8r69-3cvp-wxc3

    Batched HTTP requests may set incorrect `cache-control` response header

    ### Impact In Apollo Server 3 and 4, the `cache-control` HTTP response header may not reflect the cache policy that should apply to an HTTP request when that HTTP request contains multiple operations using HTTP batching. This could lead to data being inapprop…

    @apollo/server apollo-server-core npm