Skip to content
OpenAdvisories

Package · npm

apollo-server

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-23897

    Apollo Server is vulnerable to denial of service with `startStandaloneServer`

    Apollo Server is an open-source, spec-compliant GraphQL server that's compatible with any GraphQL client, including Apollo Client. In versions from 2.0.0 to 3.13.0, 4.2.0 to before 4.13.0, and 5.0.0 to before 5.4.0, the default configuration of startStandalon…

    apollographql apollo-server @apollo/server apollo-server npm
  • High —
    GHSA-qm7x-rc44-rrqw

    Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)

    ### Impact In certain configurations, Apollo Server serves the client-side web app "GraphQL Playground" from the same web server that executes GraphQL operations. This web app has access to cookies and other credentials associated with the web server's operat…

    apollo-server npm