apollographql federation vulnerabilities

4 published CVEs name apollographql federation among the affected products.

Critical 0High 4Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2025-64530
@apollo/composition has Improper Enforcement of Access Control on Interface Types and Fields
apollographql · federation
High7.5
CVE-2025-32031
Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass
apollographql · federation
High7.5
CVE-2025-32030
Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion
apollographql · federation
High7.5
CVE-2024-43414
Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries
apollographql · federation
High7.5