GHSA-94hh-jmq8-2fgp: Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass
A vulnerability in Apollo Router allowed queries with deeply nested and reused named fragments to be prohibitively expensive to query plan, specifically due to internal optimizations being frequently bypassed. This could lead to excessive resource consumption and denial of service.
References
- github.com/advisories/GHSA-94hh-jmq8-2fgp
- github.com/apollographql/router
- github.com/apollographql/router/commit/ab6675a63174715ea6ff50881fc957831d4e9564
- github.com/apollographql/router/commit/bba032e183b861348a466d3123c7137a1ae18952
- github.com/apollographql/router/security/advisories/GHSA-94hh-jmq8-2fgp
Code Behaviors & Features
Detect and mitigate GHSA-94hh-jmq8-2fgp with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →