Apollographql Apollo Router — known CVE vulnerabilities

Every CVE whose affected-product data names Apollographql Apollo Router, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-41317 — CVSS 7.5 (high): The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo…
• CVE-2023-45812 — CVSS 7.5 (high): The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo…
• CVE-2024-28101 — CVSS 7.5 (high): The Apollo Router is a graph router written in Rust to run a federated supergraph that uses Apollo Federation. Versions 0.9.5 until 1.40.2…
• CVE-2024-43414 — CVSS 7.5 (high): Apollo Federation is an architecture for declaratively composing APIs into a unified graph. Each team can own their slice of the graph…
• CVE-2024-43783 — CVSS 7.5 (high): The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo…