GHSA-3j43-9v8v-cp3f: Apollo Router Query Validation Vulnerable to Excessive Resource Consumption via Named Fragment Processing
A vulnerability in Apollo Router’s usage of Apollo Compiler allowed queries with deeply nested and reused named fragments to be prohibitively expensive to validate. This could lead to excessive resource consumption and denial of service.
References
- github.com/advisories/GHSA-3j43-9v8v-cp3f
- github.com/apollographql/router
- github.com/apollographql/router/commit/ab6675a63174715ea6ff50881fc957831d4e9564
- github.com/apollographql/router/commit/bba032e183b861348a466d3123c7137a1ae18952
- github.com/apollographql/router/security/advisories/GHSA-3j43-9v8v-cp3f
Code Behaviors & Features
Detect and mitigate GHSA-3j43-9v8v-cp3f with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →