Apollo vulnerabilities
We track 1 vulnerability in Apollo products across 3 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 16, 2026.
1vulnerabilities
1critical
0high
0exploited
9.9average CVSS score
Latest Apollo vulnerabilities
- 9.9 Critical severity
federation-internals: Improperly Controlled Modification of Object Prototype Attributes
Apollo Federation is an architecture for declaratively composing APIs into a unified graph. Prior to 2.9.6, 2.10.5, 2.11.6, 2.12.3, and 2.13.2, a vulnerability exists in query plan execution within the gateway that may allow pollution of Object.prototype in ce