`@apollo/server`

Ecosystem:
npm

Package URL:
pkg:npm/@apollo/server

Total PRs:
384 Dependabot PRs

Latest PR:
12 days ago

Unique Repositories:
161 repositories

Unique Repos (30 days):
12 repositories

Security Advisories

@apollo/server vulnerable to unsafe application of Content Security Policy via reused nonces

GHSA-68jh-rf6x-836f LOW published almost 3 years ago • updated 22 days ago

### Context Content Security Policies (CSP) are a defense-in-depth strategy against XSS attacks. Improper application of CSP isn't itself a vulnera...

Apollo Server: Browser bug allows for bypass of XS-Search (read-only Cross-Site Request Forgery) prevention

GHSA-9q82-xgwf-vj6h MODERATE published 2 months ago • updated 23 days ago

# Impact In a Cross-Site Request Forgery attack, untrusted web content causes browsers to send authenticated requests to web servers which use coo...

Recent PRs

RSS Feed

Bump the npm_and_yarn group across 6 directories with 21 updates

jabari-max/ad4m #3

4.10.0 → 5.4.0 Major PR

Open 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 21 updates

SeedCompany/libs #81

4.11.3 → 5.4.0 Major PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 13 updates

powerhouse-inc/powerhouse #2369

5.1.0 → 5.4.0 Minor PR

Open 3 months ago 1 comment

build(deps): bump @apollo/server from 4.12.2 to 5.4.0

javier89/inventario-erp #3

4.12.2 → 5.4.0 Major PR

Closed 3 months ago 1 comment

fix(deps): bump the graphql-runtime group across 1 directory with 6 updates

navikt/dinesykmeldte #599

5.2.0 → 5.4.0 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the test-versions group across 1 directory with 81 updates

DataDog/dd-trace-js #7553

5.2.0 → 5.4.0 Minor PR

Open 3 months ago 1 comment

chore(deps): bump @apollo/server from 5.2.0 to 5.4.0 in /examples/federation-v2-e2e/gateway

TriPSs/nestjs-query #435

5.2.0 → 5.4.0 Minor PR

Open 4 months ago 2 comments

chore(deps): bump the test-versions group across 1 directory with 76 updates

DataDog/dd-trace-js #7500

5.2.0 → 5.4.0 Minor PR

Open 4 months ago 4 comments

chore(deps): bump @apollo/server from 5.2.0 to 5.4.0 in /examples/federation-v2-e2e/user-service

TriPSs/nestjs-query #431

5.2.0 → 5.4.0 Minor PR

Open 4 months ago 2 comments

build(deps): bump @apollo/server from 5.3.0 to 5.4.0

FrancoStino/F1-GraphQL-API #139

5.3.0 → 5.4.0 Minor PR

Open 4 months ago 2 comments

chore(deps): bump the test-versions group across 1 directory with 73 updates

DataDog/dd-trace-js #7462

5.2.0 → 5.4.0 Minor PR

Open 4 months ago 3 comments

deps(deps): bump the npm_and_yarn group across 1 directory with 6 updates

RanitManik/foody #95

5.2.0 → 5.4.0 Minor PR

Closed 4 months ago 1 comment

chore(deps): bump @apollo/server from 4.11.3 to 5.4.0 in /packages/graphql

orionjs/orionjs #422

4.11.3 → 5.4.0 Major PR

Closed 4 months ago 2 comments

chore(deps): Bump @apollo/server from 4.13.0 to 5.4.0 in /apps/api

jeromwolf/flux-ontology #20

4.13.0 → 5.4.0 Major PR

Open 4 months ago 1 comment

build(deps-dev): bump @apollo/server from 4.10.2 to 5.4.0

myparcelnl/js-pdk #298

4.10.2 → 5.4.0 Major PR

Open 4 months ago 1 comment

chore(deps): bump the apollo group across 1 directory with 2 updates

bshongwe/graphql-api #53

5.3.0 → 5.4.0 Minor PR

Open 4 months ago 2 comments

chore(deps-dev): bump @apollo/server from 5.3.0 to 5.4.0

nestjs/nest #16311

5.3.0 → 5.4.0 Minor PR

Open 4 months ago 1 comment

chore(deps): bump @apollo/server from 4.12.2 to 5.4.0

mozilla/fxa #19995

4.12.2 → 5.4.0 Major PR

Open 4 months ago 2 comments

Bump @apollo/server from 4.12.2 to 5.4.0

danielemery/quizlord-api #403

4.12.2 → 5.4.0 Major PR

Closed 4 months ago 1 comment

Bump @apollo/server from 4.12.2 to 5.4.0 in /backend

FullUproar/ravenloomai #13

4.12.2 → 5.4.0 Major PR

Open 4 months ago 2 comments

deps: bump @apollo/server from 4.12.2 to 5.4.0

City-of-Helsinki/events-helsinki-monorepo #985

4.12.2 → 5.4.0 Major PR

Open 4 months ago 26 comments

chore(deps): bump @apollo/server from 4.12.2 to 5.4.0

CONG-TY-ANH-VA-EM/ever-gauzy #10

4.12.2 → 5.4.0 Major PR

Closed 4 months ago 1 comment

chore(deps): bump @apollo/server from 4.12.2 to 5.4.0

Lep-Q-Technologies/omnivore #42

4.12.2 → 5.4.0 Major PR

Closed 4 months ago 1 comment

chore(deps): bump @apollo/server from 4.12.1 to 5.4.0 in /demo-apps/integration-tests

meabed/gqlts #1433

4.12.1 → 5.4.0 Major PR

Open 4 months ago 1 comment

chore(deps): bump @apollo/server from 4.12.2 to 5.4.0

ever-co/ever-gauzy #9421

4.12.2 → 5.4.0 Major PR

Open 4 months ago 5 comments

chore(deps): bump @apollo/server from 4.12.2 to 4.13.0 in /src/api

UK-Export-Finance/exip #3639

4.12.2 → 4.13.0 Minor PR

Open 4 months ago 2 comments

build(deps): bump @apollo/server from 4.12.2 to 5.4.0

Hopin-inc/civicship-api #646

4.12.2 → 5.4.0 Major PR

Closed 4 months ago 1 comment

chore(deps): bump @apollo/server from 4.11.3 to 5.4.0

nichechristie/oso #26

4.11.3 → 5.4.0 Major PR

Open 4 months ago 1 comment

Bump @apollo/server from 4.11.3 to 5.4.0

orionjs/orionjs #421

4.11.3 → 5.4.0 Major PR

Closed 4 months ago 1 comment

chore(deps): bump @apollo/server from 4.11.3 to 5.4.0

broisnischal/architecture #10

4.11.3 → 5.4.0 Major PR

Open 4 months ago 1 comment

Bump @apollo/server from 4.11.0 to 5.4.0

mjwbenton/billio #40

4.11.0 → 5.4.0 Major PR

Closed 4 months ago 1 comment

chore(deps): bump @apollo/server from 4.11.0 to 5.4.0

WatWowMap/ReactMap #1190

4.11.0 → 5.4.0 Major PR

Closed 4 months ago 3 comments

Bump @apollo/server from 4.10.5 to 5.4.0 in /backend

Supakornn/real-time-chat-app #49

4.10.5 → 5.4.0 Major PR

Closed 4 months ago 2 comments

Chore(deps): Bump @apollo/server from 4.11.0 to 4.13.0

uc-cdis/data-portal #1758

4.11.0 → 4.13.0 Minor PR

Open 4 months ago 5 comments

Bump @apollo/server from 4.9.5 to 5.4.0 in /final/server in the npm_and_yarn group across 1 directory

NellyBise/CatOdyssey #28

4.9.5 → 5.4.0 Major PR

Closed 4 months ago 1 comment

build(deps): bump @apollo/server from 5.3.0 to 5.4.0

ardatan/graphql-mesh #9202

5.3.0 → 5.4.0 Minor PR

Open 4 months ago 2 comments

Bump @apollo/server from 4.9.5 to 5.4.0

Mohamed-sal-ah/small-Todo-list #54

4.9.5 → 5.4.0 Major PR

Closed 4 months ago 1 comment

chore(deps): bump @apollo/server from 5.2.0 to 5.4.0

whodaniel/fuse #589

5.2.0 → 5.4.0 Minor PR

Open 4 months ago 21 comments

Bump @apollo/server from 5.3.0 to 5.4.0 in /GQL

mattsarz78/mss #415

5.3.0 → 5.4.0 Minor PR

Closed 4 months ago 1 comment

deps(npm)(deps): bump @apollo/server from 5.2.0 to 5.4.0

The-Skyy-Rose-Collection-LLC/DevSkyy #283

5.2.0 → 5.4.0 Minor PR

Open 4 months ago 5 comments

chore(deps): bump @apollo/server from 5.3.0 to 5.4.0 in /sample/12-graphql-schema-first

nestjs/nest #16305

5.3.0 → 5.4.0 Minor PR

Open 4 months ago 1 comment

Bump @apollo/server from 5.2.0 to 5.4.0

shellicar/api-playground #1

5.2.0 → 5.4.0 Minor PR

Closed 4 months ago 1 comment

chore(deps): bump @apollo/server from 5.2.0 to 5.4.0 in /integration-tests/esbuild

afresh-technologies/dd-trace-js #16

5.2.0 → 5.4.0 Minor PR

Open 4 months ago 2 comments

Bump @apollo/server from 5.2.0 to 5.4.0 in /servers/lib

INTO-CPS-Association/DTaaS #1458

5.2.0 → 5.4.0 Minor PR

Open 4 months ago 3 comments

chore(deps): bump @apollo/server from 5.2.0 to 5.4.0 in /examples/federation-v2-e2e/todo-service

TriPSs/nestjs-query #427

5.2.0 → 5.4.0 Minor PR

Open 4 months ago 2 comments

Bump @apollo/server from 4.10.4 to 5.4.0

NaveenBandarage/www. #103

4.10.4 → 5.4.0 Major PR

Open 4 months ago 1 comment

build(deps): bump @apollo/server from 5.0.0 to 5.4.0 in /backend

Ret2Hell/UniCloud #10

5.0.0 → 5.4.0 Minor PR

Open 4 months ago 2 comments

chore(deps): bump @apollo/server from 5.2.0 to 5.4.0

zakodium/adonis-apollo #72

5.2.0 → 5.4.0 Minor PR

Closed 4 months ago 2 comments

Bump @apollo/server from 5.3.0 to 5.4.0

seerviashish/psl #1426

5.3.0 → 5.4.0 Minor PR

Closed 4 months ago 1 comment

chore(deps): bump the test-versions group across 1 directory with 67 updates

DataDog/dd-trace-js #7417

5.2.0 → 5.3.0 Minor PR

Open 4 months ago 2 comments

Package Details

Name:	`@apollo/server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@apollo/server`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 1

MODERATE 2

LOW 2

View All npm Advisories

Package Information

Description:

Core engine for Apollo GraphQL server

Repository:	https://github.com/apollographql/apollo-server
Homepage:	https://github.com/apollographql/apollo-server#readme
Latest Release:	`4.12.2` 12 months ago
Dependent Repos:	5,993
Dependent Packages:	392
Downloads:	5,424,182
Ranking:	Top 0.3029% by dependent repos Top 0.1646% by downloads Top 0.1585% by dependent pkgs

PR Status

Open 188 (49.0%)

Merged 28 (7.3%)

Closed 132 (34.4%)

PR Types

Major 135 (35.2%)

Minor 150 (39.1%)

Patch 63 (16.4%)

@apollo/server

Security Advisories

Apollo Serve vulnerable to Denial of Service with `startStandaloneServer`

Batched HTTP requests may set incorrect `cache-control` response header

Prevent logging invalid header values

@apollo/server vulnerable to unsafe application of Content Security Policy via reused nonces

Apollo Server: Browser bug allows for bypass of XS-Search (read-only Cross-Site Request Forgery) prevention

Recent PRs

Package Details

Security Advisories

5

Package Information

PR Status

PR Types

`@apollo/server`