apollographql apollo-server

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-23897>= 2.0.0, <= 3.13.0 ; >= 4.2.0, < 4.13.0 ; >= 5.0.0, < 5.4.0Apollo Server is vulnerable to denial of service with `startStandaloneServer`HIGH 7.50.7 %