`@apollo/server`

Ecosystem:
npm

Package URL:
pkg:npm/@apollo/server

Total PRs:
384 Dependabot PRs

Latest PR:
12 days ago

Unique Repositories:
161 repositories

Unique Repos (30 days):
12 repositories

Security Advisories

Apollo Serve vulnerable to Denial of Service with `startStandaloneServer`

GHSA-mp6q-xf9x-fwf7 CVE-2026-23897 HIGH published 4 months ago • updated about 12 hours ago

### Impact The default configuration of `startStandaloneServer` from `@apollo/server/standalone` is vulnerable to Denial of Service (DoS) attacks ...

Batched HTTP requests may set incorrect `cache-control` response header

GHSA-8r69-3cvp-wxc3 MODERATE published over 3 years ago • updated 11 days ago

### Impact In Apollo Server 3 and 4, the `cache-control` HTTP response header may not reflect the cache policy that should apply to an HTTP request...

Prevent logging invalid header values

GHSA-j5g3-5c8r-7qfx LOW published over 2 years ago • updated 2 days ago

## Impact ### What kind of vulnerability is it? Apollo Server can log sensitive information (Studio API keys) if they are passed incorrectly (with ...

@apollo/server vulnerable to unsafe application of Content Security Policy via reused nonces

GHSA-68jh-rf6x-836f LOW published almost 3 years ago • updated 22 days ago

### Context Content Security Policies (CSP) are a defense-in-depth strategy against XSS attacks. Improper application of CSP isn't itself a vulnera...

Apollo Server: Browser bug allows for bypass of XS-Search (read-only Cross-Site Request Forgery) prevention

GHSA-9q82-xgwf-vj6h MODERATE published 2 months ago • updated 23 days ago

# Impact In a Cross-Site Request Forgery attack, untrusted web content causes browsers to send authenticated requests to web servers which use coo...

Recent PRs (filtered by: Open , Patch PRs )

RSS Feed Clear filter

chore(deps): bump the npm-minor-patch group across 1 directory with 15 updates

CaQuick/caquick-be #91

5.5.0 → 5.5.1 Patch PR

Open 13 days ago 2 comments

build(deps): bump the prod-deps group across 1 directory with 7 updates

WujiLabs/playtiss #11

5.5.0 → 5.5.1 Patch PR

Open 19 days ago 1 comment

chore(deps): bump the test-versions group across 1 directory with 2 updates

DataDog/dd-trace-js #8410

5.5.0 → 5.5.1 Patch PR

Open 20 days ago 3 comments

chore(deps-dev): bump @apollo/server from 5.5.0 to 5.5.1

nestjs/nest #16894

5.5.0 → 5.5.1 Patch PR

Open 25 days ago 1 comment

feat(deps): bump the all-deps group across 1 directory with 43 updates

VilnaCRM-Org/website #200

4.12.1 → 4.12.2 Patch PR

Open 12 months ago 1 comment

Bump @apollo/server from 4.12.1 to 4.12.2

cloud-design-patterns-journey/inv-bff-team1 #1

4.12.1 → 4.12.2 Patch PR

Open 12 months ago

Bump @apollo/server from 4.12.1 to 4.12.2

FrancoStino/F1-GraphQL-API #26

4.12.1 → 4.12.2 Patch PR

Open 12 months ago 4 comments

Bump @apollo/server from 4.12.1 to 4.12.2

FrancoStino/F1-GraphQL #26

4.12.1 → 4.12.2 Patch PR

Open 12 months ago

deps(example): Bump the dependencies group across 1 directory with 6 updates

arcjet/arcjet-js #4333

4.12.1 → 4.12.2 Patch PR

Open 12 months ago 2 comments

build(deps-dev): bump @apollo/server from 4.12.1 to 4.12.2 in the graphql group across 1 directory

Papooch/nestjs-cls #336

4.12.1 → 4.12.2 Patch PR

Open 12 months ago 1 comment

chore(deps): bump @apollo/server from 4.12.1 to 4.12.2

g59/nestjs-plugins #1962

4.12.1 → 4.12.2 Patch PR

Open 12 months ago

deps(example): Bump the dependencies group across 1 directory with 7 updates

arcjet/arcjet-js #4326

4.12.1 → 4.12.2 Patch PR

Open 12 months ago

feat(deps): bump the all-deps group across 1 directory with 33 updates

VilnaCRM-Org/website #198

4.12.1 → 4.12.2 Patch PR

Open 12 months ago 5 comments

deps(example): Bump the dependencies group across 1 directory with 6 updates

arcjet/arcjet-js #4313

4.12.1 → 4.12.2 Patch PR

Open 12 months ago 3 comments

feat(deps): bump the all-deps group across 1 directory with 28 updates

VilnaCRM-Org/website #196

4.12.1 → 4.12.2 Patch PR

Open 12 months ago 1 comment

build(deps): bump @apollo/server from 4.12.1 to 4.12.2 in /src

warmachine028/learning-GraphQL #80

4.12.1 → 4.12.2 Patch PR

Open 12 months ago

chore(deps): bump @apollo/server from 4.12.1 to 4.12.2 in /server

warmachine028/graph-ql-server #135

4.12.1 → 4.12.2 Patch PR

Open 12 months ago

Bump @apollo/server from 4.12.1 to 4.12.2

lpgera/dirigera-web #2007

4.12.1 → 4.12.2 Patch PR

Open 12 months ago

Bump @apollo/server from 4.12.1 to 4.12.2

seerviashish/psl #1055

4.12.1 → 4.12.2 Patch PR

Open 12 months ago 1 comment

chore(deps-dev): bump @apollo/server from 4.12.1 to 4.12.2

nestjs/nest #15224

4.12.1 → 4.12.2 Patch PR

Open 12 months ago

build(deps): bump the node-deps group with 17 updates

taskcluster/taskcluster #7748

4.12.0 → 4.12.1 Patch PR

Open 12 months ago

deps(example): Bump the dependencies group across 1 directory with 6 updates

arcjet/arcjet-js #4219

4.12.0 → 4.12.1 Patch PR

Open about 1 year ago 1 comment

feat(deps): bump the all-deps group with 51 updates

VilnaCRM-Org/website #184

4.12.0 → 4.12.1 Patch PR

Open about 1 year ago

build(deps): bump the production-dependencies group with 2 updates

aevrspace/wallet-api #17

4.12.0 → 4.12.1 Patch PR

Open about 1 year ago 1 comment

Bump the minor-and-patch group in /backend with 2 updates

ky1ejs/eleat #85

4.12.0 → 4.12.1 Patch PR

Open about 1 year ago 1 comment

Bump @apollo/server from 4.12.0 to 4.12.1

FrancoStino/F1-GraphQL #14

4.12.0 → 4.12.1 Patch PR

Open about 1 year ago 3 comments

build(deps-dev): bump @apollo/server from 4.12.0 to 4.12.1 in the graphql group across 1 directory

Papooch/nestjs-cls #309

4.12.0 → 4.12.1 Patch PR

Open about 1 year ago

deps(example): Bump the dependencies group across 1 directory with 8 updates

arcjet/arcjet-js #4185

4.12.0 → 4.12.1 Patch PR

Open about 1 year ago 3 comments

chore(deps-dev): bump @apollo/server from 4.12.0 to 4.12.1 in the apollo group

elastic/apm-agent-nodejs #4615

4.12.0 → 4.12.1 Patch PR

Open about 1 year ago 2 comments

Bump @apollo/server from 4.12.0 to 4.12.1

seerviashish/psl #1021

4.12.0 → 4.12.1 Patch PR

Open about 1 year ago 1 comment

chore(deps-dev): bump @apollo/server from 4.12.0 to 4.12.1

nestjs/nest #15139

4.12.0 → 4.12.1 Patch PR

Open about 1 year ago 1 comment

build(deps): bump @apollo/server from 4.12.0 to 4.12.1 in /src

warmachine028/learning-GraphQL #78

4.12.0 → 4.12.1 Patch PR

Open about 1 year ago 1 comment

Package Details

Name:	`@apollo/server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@apollo/server`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 1

MODERATE 2

LOW 2

View All npm Advisories

Package Information

Description:

Core engine for Apollo GraphQL server

Repository:	https://github.com/apollographql/apollo-server
Homepage:	https://github.com/apollographql/apollo-server#readme
Latest Release:	`4.12.2` 12 months ago
Dependent Repos:	5,993
Dependent Packages:	392
Downloads:	5,424,182
Ranking:	Top 0.3029% by dependent repos Top 0.1646% by downloads Top 0.1585% by dependent pkgs

PR Status

Open 188 (49.0%)

Merged 28 (7.3%)

Closed 132 (34.4%)

PR Types

Major 135 (35.2%)

Minor 150 (39.1%)

Patch 63 (16.4%)