apollo-server

3.13.0 · 14 Nov 2023MIT118k / weekRepository Homepage npm Atom feed

Deprecated by its maintainers: The `apollo-server` package is part of Apollo Server v2 and v3, which are now end-of-life (as of October 22nd 2023 and October 22nd 2024, respectively). This package's functionality is now found in the `@apollo/server` package. See https://www.apollographql.com/docs/apollo-server/previous-versions/ for more details.What to use instead

Your version

2.25.0

27 May 2021

2.26.2 is the newest release of 2.x.

Security

3 advisories affect 2.25.0; 2.25.4 fixes the others

High
Apollo Serve vulnerable to Denial of Service with `startStandaloneServer`GHSA-mp6q-xf9x-fwf7 · 4 Feb 2026
No fix yet
High
Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)GHSA-qm7x-rc44-rrqw · 8 Nov 2021
Fixed in 2.25.3
Moderate
The graphql-upload library included in Apollo Server 2 is vulnerable to CSRF mutationsGHSA-2p3c-p3qw-69r4 · 12 Oct 2022
Fixed in 2.25.4

Release note

No note was found for 2.25.0 on GitHub or in the repository's changelog.