Is apollo-router safe to use? Its security history

Every advisory, newest first

• VulnerabilityGHSA-hff2-gcpx-8f4p · 2026-03-26Apollo Router Core: Browser Bug Enables Bypass of XS-Search Prevention via Read-Only Cross-Site Request Forgery
• VulnerabilityGHSA-hff2-gcpx-8f4p · 2026-03-26Apollo Router Core: Browser Bug Enables Bypass of XS-Search Prevention via Read-Only Cross-Site Request Forgery
• VulnerabilityGHSA-hff2-gcpx-8f4p · 2026-03-26Apollo Router Core: Browser Bug Enables Bypass of XS-Search Prevention via Read-Only Cross-Site Request Forgery
• VulnerabilityGHSA-x33c-7c2v-mrj9 · 2025-11-06Apollo Router Affected by an Access Control Bypass on Polymorphic Types
• VulnerabilityGHSA-x33c-7c2v-mrj9 · 2025-11-06Apollo Router Affected by an Access Control Bypass on Polymorphic Types
• VulnerabilityGHSA-g8jh-vg5j-4h3f · 2025-11-06Apollo Router Improperly Enforces Renamed Access Control Directives
• VulnerabilityGHSA-g8jh-vg5j-4h3f · 2025-11-06Apollo Router Improperly Enforces Renamed Access Control Directives
• VulnerabilityGHSA-3j43-9v8v-cp3f · 2025-04-07Apollo Router Query Validation Vulnerable to Excessive Resource Consumption via Named Fragment Processing
• VulnerabilityGHSA-3j43-9v8v-cp3f · 2025-04-07Apollo Router Query Validation Vulnerable to Excessive Resource Consumption via Named Fragment Processing
• VulnerabilityGHSA-84m6-5m72-45fp · 2025-04-07Apollo Router Operation Limits Vulnerable to Bypass via Integer Overflow
• VulnerabilityGHSA-84m6-5m72-45fp · 2025-04-07Apollo Router Operation Limits Vulnerable to Bypass via Integer Overflow
• VulnerabilityGHSA-75m2-jhh5-j5g2 · 2025-04-07Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion
• VulnerabilityGHSA-75m2-jhh5-j5g2 · 2025-04-07Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion
• VulnerabilityGHSA-94hh-jmq8-2fgp · 2025-04-07Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass
• VulnerabilityGHSA-94hh-jmq8-2fgp · 2025-04-07Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass
• VulnerabilityGHSA-x6xq-whh3-gg32 · 2024-08-27Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies
• VulnerabilityGHSA-fmj9-77q8-g6c4 · 2024-08-27Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries
• VulnerabilityGHSA-q9p4-hw9m-fj2v · 2024-05-02Apollo Router vulnerable to Critical Regression In Query Plan Cache
• VulnerabilityGHSA-cgqf-3cq5-wvcj · 2024-03-06Apollo Router's Compressed Payloads do not respect HTTP Payload Limits
• VulnerabilityGHSA-r344-xw3p-2frj · 2023-10-19Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions
• VulnerabilityGHSA-w8vq-3hf9-xppx · 2023-09-07Apollo Router Unnamed "Subscription" operation results in Denial-of-Service

Check your version

Run cargo tree -i apollo-router to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.

RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.