apollo-server
3.13.0 · 14 Nov 2023MIT118k / weekRepositoryHomepagenpmAtom feed
Deprecated by its maintainers: The `apollo-server` package is part of Apollo Server v2 and v3, which are now end-of-life (as of October 22nd 2023 and October 22nd 2024, respectively). This package's functionality is now found in the `@apollo/server` package. See https://www.apollographql.com/docs/apollo-server/previous-versions/ for more details.What to use instead
Upgrading apollo-server from 0.3.2 to 2.14.2
76 releases in betweennotes for 0
2.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
- ?
- changes to make
- 1
- advisory fixed
- ?
- new
- ?
- fixes
Counted from 0 of 76 release notes. Advisories are counted from the advisory database, in full.
Security
3 advisories still affect 2.14.2
- The graphql-upload library included in Apollo Server 2 is vulnerable to CSRF mutationsmoderate · GHSA-2p3c-p3qw-69r4
- Apollo Serve vulnerable to Denial of Service with `startStandaloneServer`high · GHSA-mp6q-xf9x-fwf7
- Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)high · GHSA-qm7x-rc44-rrqw
No published version clears them all yet.
Fixes 1 advisory affecting 0.3.2
- Introspection in schema validation in Apollo Servermoderate · GHSA-w42g-7vfc-xf37