Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-peh1-p69m-nyh7
Aliases:
CVE-2026-23897
GHSA-mp6q-xf9x-fwf7
|
Apollo Serve vulnerable to Denial of Service with `startStandaloneServer`
The default configuration of `startStandaloneServer` from `@apollo/server/standalone` is vulnerable to Denial of Service (DoS) attacks through specially crafted request bodies with exotic character set encodings.
This issue does not affect users that use `@apollo/server` as a dependency for integration packages, like `@as integrations/express5` or `@as-integrations/next`, only direct usage of `startStandaloneServer`.
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|