Skip to content
OpenAdvisories

Vendor

apollographql

20 known vulnerabilities.

Products

router 11 federation 4 apollo-mcp-server 1 embeddable-explorer 1 apollo-server 1 apollo-rs 1 apollo-client-nextjs 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2025-59845 Public exploit

    Apollo Embedded Sandbox and Explorer vulnerable to CSRF via window.postMessage origin-validation bypass

    Apollo Studio Embeddable Explorer & Embeddable Sandbox are website embeddable software solutions from Apollo GraphQL. Prior to Apollo Sandbox version 2.7.2 and Apollo Explorer version 3.7.3, a cross-site request forgery (CSRF) vulnerability was identified. Th…

    apollographql embeddable-explorer @apollo/explorer @apollo/sandbox npm