Executive brief
Apollo Router's Compressed Payloads do not respect HTTP Payload Limits
Affected products
- crates.io apollo-router
Junglewise Threat Intelligence
CVE-2024-28101: Apollo Router's Compressed Payloads do not respect HTTP Payload Limits
CVE-2024-28101 · Severity: low · CVSS 3.1 · Published 2024-03-06
Technologies: apollo-router (crates.io). Vendors: crates.io.
Related threats
- Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies
- Apollo Query Planner infinite loop on complex queries
- Apollo Router vulnerable to Critical Regression In Query Plan Cache
- Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions
- Apollo Router Unnamed "Subscription" operation results in Denial-of-Service