Skip to content
OpenAdvisories

Package · npm

apollo-server

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    GHSA-2p3c-p3qw-69r4

    The graphql-upload library included in Apollo Server 2 is vulnerable to CSRF mutations

    ### Impact The [graphql-upload](https://www.npmjs.com/package/graphql-upload) npm package can execute GraphQL operations contained in `content-type: multipart/form-data` POST requests. Because they are POST requests, they can contain GraphQL mutations. Becaus…

    apollo-server npm
  • Medium —
    GHSA-w42g-7vfc-xf37

    Introspection in schema validation in Apollo Server

    We encourage all users of Apollo Server to read this advisory in its entirety to understand the impact. The _Resolution_ section contains details on patched versions. ### Impact If `subscriptions: false` is passed to the `ApolloServer` constructor options, th…

    apollo-server-core apollo-server apollo-server-micro apollo-server-cloud-functions npm