@apollo/query-planner

2.14.4 · 18 Aug 2026Elastic-2.0189.1k / weekRepository Homepage npm Atom feed

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Paste your package.json, or type the range you declare for @apollo/query-planner. It is read in your browser and sent nowhere.

Line	Newest	Where it stands
	2.14.4	Safe from 2.13.2
	0.12.1	13 open advisories, worst critical · last release Nov 2022, no longer updated

Your version

Critical
Apollo Federation vulnerable to prototype pollution via incomplete key sanitizationGHSA-pfjj-6f4p-rvmh · 13 Mar 2026
- 2.x2.0.0 – 2.13.1Fixed in 2.13.2
- 0.12.x and older0.0.1 – 0.12.1No fix, no longer updated · move to 2.13.2
High
Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queriesGHSA-fmj9-77q8-g6c4 · 27 Aug 2024
- 2.x2.0.0 – 2.8.4Fixed in 2.8.5

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 24 Oct 2026. Releases and advisories last read 24 Oct 2026.