Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

@apollo/server

Ecosystem:
npm
Package URL:
pkg:npm/@apollo/server
Total PRs:
384 Dependabot PRs
Latest PR:
13 days ago
Unique Repositories:
161 repositories
Unique Repos (30 days):
12 repositories
Security Advisories
Apollo Serve vulnerable to Denial of Service with `startStandaloneServer`
GHSA-mp6q-xf9x-fwf7 CVE-2026-23897 HIGH published 4 months ago • updated 1 day ago
### Impact The default configuration of `startStandaloneServer` from `@apollo/server/standalone` is vulnerable to Denial of Service (DoS) attacks ...
Batched HTTP requests may set incorrect `cache-control` response header
GHSA-8r69-3cvp-wxc3 MODERATE published over 3 years ago • updated 12 days ago
### Impact In Apollo Server 3 and 4, the `cache-control` HTTP response header may not reflect the cache policy that should apply to an HTTP request...
Prevent logging invalid header values
GHSA-j5g3-5c8r-7qfx LOW published almost 3 years ago • updated 3 days ago
## Impact ### What kind of vulnerability is it? Apollo Server can log sensitive information (Studio API keys) if they are passed incorrectly (with ...
@apollo/server vulnerable to unsafe application of Content Security Policy via reused nonces
GHSA-68jh-rf6x-836f LOW published almost 3 years ago • updated 22 days ago
### Context Content Security Policies (CSP) are a defense-in-depth strategy against XSS attacks. Improper application of CSP isn't itself a vulnera...
Apollo Server: Browser bug allows for bypass of XS-Search (read-only Cross-Site Request Forgery) prevention
GHSA-9q82-xgwf-vj6h MODERATE published 2 months ago • updated 24 days ago
# Impact In a Cross-Site Request Forgery attack, untrusted web content causes browsers to send authenticated requests to web servers which use coo...
Recent PRs (filtered by: Merged , Patch PRs )
RSS Feed Clear filter
build(deps-dev): bump the graphql group across 1 directory with 2 updates

Papooch/nestjs-cls #350

4.12.1 → 4.12.2 Patch PR
Merged 11 months ago
Papooch
Bump @apollo/server from 4.12.0 to 4.12.2 in /backend

CDRjobs/website #298

4.12.0 → 4.12.2 Patch PR
Merged 12 months ago
CDRjobs
build(deps): bump the production-dependencies group across 1 directory with 4 updates

aevrspace/wallet-api #20

4.12.0 → 4.12.2 Patch PR
Merged 12 months ago
aevrspace
Bump the minor-and-patch group in /backend with 4 updates

ky1ejs/eleat #90

4.12.1 → 4.12.2 Patch PR
Merged 12 months ago 1 comment
ky1ejs
Bump the minor-and-patch group in /backend with 5 updates

ky1ejs/cut #267

4.12.1 → 4.12.2 Patch PR
Merged 12 months ago 1 comment
ky1ejs
build(deps): bump @apollo/server from 4.12.1 to 4.12.2 in /server

SrijaAdhya12/expense-trackerQL #294

4.12.1 → 4.12.2 Patch PR
Merged 12 months ago 1 comment
SrijaAdhya12
chore(deps-dev): bump @apollo/server from 4.12.1 to 4.12.2 in the apollo group

elastic/apm-agent-nodejs #4643

4.12.1 → 4.12.2 Patch PR
Merged 12 months ago 1 comment
elastic
Bump @apollo/server from 4.12.1 to 4.12.2

lpgera/cookbook #1515

4.12.1 → 4.12.2 Patch PR
Merged 12 months ago
lpgera
Bump @apollo/server from 4.12.1 to 4.12.2

frantisekpetko/next-nestjs-zoo-admin #729

4.12.1 → 4.12.2 Patch PR
Merged 12 months ago
frantisekpetko
build(deps): bump @apollo/server from 4.12.0 to 4.12.1

5e-bits/5e-srd-api #774

4.12.0 → 4.12.1 Patch PR
Merged about 1 year ago
5e-bits
Bump the minor-and-patch group in /backend with 3 updates

ky1ejs/cut #253

4.12.0 → 4.12.1 Patch PR
Merged about 1 year ago 1 comment
ky1ejs
build(deps): bump @apollo/server from 4.12.0 to 4.12.1 in /server

SrijaAdhya12/expense-trackerQL #273

4.12.0 → 4.12.1 Patch PR
Merged about 1 year ago 1 comment
SrijaAdhya12
chore(deps): bump @apollo/server from 4.12.0 to 4.12.1

g59/nestjs-plugins #1959

4.12.0 → 4.12.1 Patch PR
Merged about 1 year ago
g59
Bump @apollo/server from 4.12.0 to 4.12.1

lpgera/dirigera-web #1981

4.12.0 → 4.12.1 Patch PR
Merged about 1 year ago
lpgera
Bump @apollo/server from 4.12.0 to 4.12.1

lpgera/cookbook #1491

4.12.0 → 4.12.1 Patch PR
Merged about 1 year ago
lpgera
chore(deps): bump @apollo/server from 4.12.0 to 4.12.1 in /server

warmachine028/graph-ql-server #127

4.12.0 → 4.12.1 Patch PR
Merged about 1 year ago
warmachine028
Bump @apollo/server from 4.12.0 to 4.12.1

frantisekpetko/next-nestjs-zoo-admin #678

4.12.0 → 4.12.1 Patch PR
Merged about 1 year ago
frantisekpetko
Package Details
Name: @apollo/server
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/@apollo/server
JSON API: View JSON
Security Advisories

5

Active advisories
HIGH 1
MODERATE 2
LOW 2
View All npm Advisories
Package Information
Description:

Core engine for Apollo GraphQL server

Repository: https://github.com/apollographql/apollo-server
Homepage: https://github.com/apollographql/apollo-server#readme
Latest Release: 4.12.2
12 months ago
Dependent Repos: 5,993
Dependent Packages: 392
Downloads: 5,424,182
Ranking: Top 0.3029% by dependent repos Top 0.1646% by downloads Top 0.1585% by dependent pkgs
PR Status
Open 188 (49.0%)
Merged 28 (7.3%)
Closed 132 (34.4%)
PR Types
Major 135 (35.2%)
Minor 150 (39.1%)
Patch 63 (16.4%)