Executive brief
Apollo Router vulnerable to Critical Regression In Query Plan Cache
Affected products
- crates.io apollo-router
Junglewise Threat Intelligence
CVE-2024-32971: Apollo Router vulnerable to Critical Regression In Query Plan Cache
CVE-2024-32971 · Severity: low · CVSS 3.1 · Published 2024-05-02
Technologies: apollo-router (crates.io). Vendors: crates.io.
Related threats
- Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies
- Apollo Query Planner infinite loop on complex queries
- Apollo Router's Compressed Payloads do not respect HTTP Payload Limits
- Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions
- Apollo Router Unnamed "Subscription" operation results in Denial-of-Service