apollographql kayıtları
apollographql üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-770 Allocation of Resources Without Limits or Throttling3
- CWE-346 Origin Validation Error1
- CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)1
- CWE-440 Expected Behavior Violation1
- CWE-674 Uncontrolled Recursion1
- CWE-754 Improper Check for Unusual or Exceptional Conditions1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2024-32971İstismar yok | Defect in query plan cache may cause incorrect operations to be executed in Apollo Routerapollographql · router · CWE-440 | Kritik9,0 | — | %0,7 | 2 May 2024 |
32İzleyin | CVE-2026-35577İstismar yok | Missing Host Header Validation in Apollo MCP Server for Localhost Deploymentsapollographql · apollo mcp server · CWE-346 | Yüksek8,1 | — | %0,1 | 9 Nis 2026 |
30İzleyin | CVE-2024-43414İstismar yok | Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queriesapollographql · apollo-router · CWE-674 | Yüksek7,5 | — | %0,9 | 27 Ağu 2024 |
30İzleyin | CVE-2023-45812İstismar yok | Improper Check or Handling of Exceptional Conditions in apollo-routerapollographql · apollo router · CWE-754 | Yüksek7,5 | — | %0,8 | 18 Eki 2023 |
30İzleyin | CVE-2024-43783İstismar yok | Apollo Router Coprocessors may cause Denial-of-Service when handling request bodiesapollographql · apollo-router · CWE-770 | Yüksek7,5 | — | %0,8 | 27 Ağu 2024 |
30İzleyin | CVE-2024-28101İstismar yok | Apollo Router's Compressed Payloads do not respect HTTP Payload Limitsapollographql · apollo router · CWE-409 | Yüksek7,5 | — | %0,7 | 20 Mar 2024 |
30İzleyin | CVE-2026-23897İstismar yok | Apollo Server is vulnerable to denial of service with `startStandaloneServer`apollographql · apollo server · CWE-1333 | Yüksek7,5 | — | %0,6 | 4 Şub 2026 |
30İzleyin | CVE-2025-32031İstismar yok | Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypassapollographql · apollo gateway · CWE-770 | Yüksek7,5 | — | %0,6 | 7 Nis 2025 |
30İzleyin | CVE-2025-32030İstismar yok | Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansionapollographql · apollo gateway · CWE-770 | Yüksek7,5 | — | %0,5 | 7 Nis 2025 |
24İzleyin | CVE-2024-23841İstismar yok | XSS in @apollo/experimental-nextjs-app-supportapollographql · apollo client · CWE-80 | Orta6,1 | — | %0,3 | 30 Oca 2024 |
23İzleyin | CVE-2023-41317İstismar yok | Unnamed "Subscription" operation results in Denial-of-Service in apollographql/routerapollographql · apollo router · CWE-755 | Orta5,9 | — | %0,8 | 5 Eyl 2023 |
- CVE-2024-3297136İzleyin
Defect in query plan cache may cause incorrect operations to be executed in Apollo Router
KritikCVSS 9,0İstismar yokEPSS %0apollographql · router2 May 2024
- CVE-2026-3557732İzleyin
Missing Host Header Validation in Apollo MCP Server for Localhost Deployments
YüksekCVSS 8,1İstismar yokEPSS %0apollographql · apollo mcp server9 Nis 2026
- CVE-2024-4341430İzleyin
Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries
YüksekCVSS 7,5İstismar yokEPSS %0apollographql · apollo-router27 Ağu 2024
- CVE-2023-4581230İzleyin
Improper Check or Handling of Exceptional Conditions in apollo-router
YüksekCVSS 7,5İstismar yokEPSS %0apollographql · apollo router18 Eki 2023
- CVE-2024-4378330İzleyin
Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies
YüksekCVSS 7,5İstismar yokEPSS %0apollographql · apollo-router27 Ağu 2024
- CVE-2024-2810130İzleyin
Apollo Router's Compressed Payloads do not respect HTTP Payload Limits
YüksekCVSS 7,5İstismar yokEPSS %0apollographql · apollo router20 Mar 2024
- CVE-2026-2389730İzleyin
Apollo Server is vulnerable to denial of service with `startStandaloneServer`
YüksekCVSS 7,5İstismar yokEPSS %0apollographql · apollo server4 Şub 2026
- CVE-2025-3203130İzleyin
Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass
YüksekCVSS 7,5İstismar yokEPSS %0apollographql · apollo gateway7 Nis 2025
- CVE-2025-3203030İzleyin
Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion
YüksekCVSS 7,5İstismar yokEPSS %0apollographql · apollo gateway7 Nis 2025
- CVE-2024-2384124İzleyin
XSS in @apollo/experimental-nextjs-app-support
OrtaCVSS 6,1İstismar yokEPSS %0apollographql · apollo client30 Oca 2024
- CVE-2023-4131723İzleyin
Unnamed "Subscription" operation results in Denial-of-Service in apollographql/router
OrtaCVSS 5,9İstismar yokEPSS %0apollographql · apollo router5 Eyl 2023