Apollographql Apollo Gateway — known CVE vulnerabilities

Every CVE whose affected-product data names Apollographql Apollo Gateway, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-43414 — CVSS 7.5 (high): Apollo Federation is an architecture for declaratively composing APIs into a unified graph. Each team can own their slice of the graph…
• CVE-2025-32030 — CVSS 7.5 (high): Apollo Gateway provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint. Prior to 2.10.1, a…
• CVE-2025-32031 — CVSS 7.5 (high): Apollo Gateway provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint. Prior to 2.10.1, a…