apollo-router (crates.io) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the crates.io package apollo-router, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (12)

• CVE-2024-32971 — CVSS 9.0 (critical): Apollo Router is a configurable, graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. The affected…
• CVE-2023-45812 — CVSS 7.5 (high): The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo…
• CVE-2024-28101 — CVSS 7.5 (high): The Apollo Router is a graph router written in Rust to run a federated supergraph that uses Apollo Federation. Versions 0.9.5 until 1.40.2…
• CVE-2024-43414 — CVSS 7.5 (high): Apollo Federation is an architecture for declaratively composing APIs into a unified graph. Each team can own their slice of the graph…
• CVE-2024-43783 — CVSS 7.5 (high): The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo…
• CVE-2025-32032 — CVSS 7.5 (high): The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo…
• CVE-2025-32033 — CVSS 7.5 (high): The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo…
• CVE-2025-32034 — CVSS 7.5 (high): The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo…
• CVE-2025-32380 — CVSS 7.5 (high): The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo…
• CVE-2025-64173 — CVSS 7.5 (high): Apollo Router Core is a configurable graph router written in Rust to run a federated supergraph using Apollo Federation 2. In versions…
• CVE-2023-41317 — CVSS 7.5 (high): The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo…
• CVE-2025-64347 — CVSS 7.5 (high): Apollo Router Core is a configurable Rust graph router written to run a federated supergraph using Apollo Federation 2. Versions…