@apollo/gateway (>=2.11.0, <=2.11.5), @dfanchon/gateway (2.11.0) +1 more potentially affected by CVE-2026-32621 via @apollo/query-planner (>=2.11.0, <=2.11.5)

@apollo/query-planner NPM version =2.11.0, =2.11.0, =11.1.14, =11.2.0 Source cves: CVE-2026-32621 Source advisory: OSV:GHSA-PFJJ-6F4P-RVMH...

@lenne.tech/nest-server (>=10.8.3, <=11.1.13), @pothos-examples/federation (3.1.13) +1 more potentially affected by CVE-2026-32621 via @apollo/gateway (>=2.10.0, <=2.10.2)

@apollo/gateway NPM version =2.10.0, =10.8.3, =11.1.13 - @pothos-examples/federation 3.1.13 - @pothos-examples/prisma-federation 3.1.24 Source cves: CVE-2026-32621 Source advisory: SNYK:JS-APOLLOGATEWAY-15612461...

Prototype Pollution

Overview @apollo/federation-internals is an Apollo Federation internal utilities Affected versions of this package are vulnerable to Prototype Pollution through incomplete sanitization of input in the query plan execution. An attacker can manipulate the Object.prototype in the gateway by crafting...

Prototype Pollution

Overview @apollo/gateway is a library exporting utility functions. Affected versions of this package are vulnerable to Prototype Pollution through incomplete sanitization of input in the query plan execution. An attacker can manipulate the Object.prototype in the gateway by crafting operations wi...

@genesisx/graphql (>=3.0.0-beta.1, <=4.0.1), @genesisx/graphql-utils (>=3.0.0-beta.0, <=3.0.1) +9 more potentially affected by CVE-2026-32621 via @apollo/gateway (>=2.0.0-preview.2, <=2.9.3)

@apollo/gateway NPM version =2.0.0-preview.2, =3.0.0-beta.1, =3.0.0-beta.0, =0.11.46-alpha-bad726532.0, =0.0.1, =8.6.7, =2.8.54, =0.0.0-preview-20220428090254, =0.0.0-preview-20221125005457, =1.3.3, =0.0.3, =1.0.48 - nestjs-registry 0.0.1 Source cves: CVE-2026-32621 Source advisory:...

@genesisx/graphql (>=3.0.0-beta.1, <=4.0.1), @genesisx/graphql-utils (>=3.0.0-beta.0, <=3.0.1) +9 more potentially affected by CVE-2026-32621 via @apollo/gateway (>=2.0.0-preview.2, <=2.9.3)

@apollo/gateway NPM version =2.0.0-preview.2, =3.0.0-beta.1, =3.0.0-beta.0, =0.11.46-alpha-bad726532.0, =0.0.1, =8.6.7, =2.8.54, =0.0.0-preview-20220428090254, =0.0.0-preview-20221125005457, =1.3.3, =0.0.3, =1.0.48 - nestjs-registry 0.0.1 Source cves: CVE-2026-32621 Source advisory:...

@lenne.tech/nest-server (>=10.8.3, <=11.1.13), @pothos-examples/federation (3.1.13) +1 more potentially affected by CVE-2026-32621 via @apollo/gateway (>=2.10.0, <=2.10.2)

@apollo/gateway NPM version =2.10.0, =10.8.3, =11.1.13 - @pothos-examples/federation 3.1.13 - @pothos-examples/prisma-federation 3.1.24 Source cves: CVE-2026-32621 Source advisory: OSV:GHSA-PFJJ-6F4P-RVMH...

@lenne.tech/nest-server (>=11.1.14, <=11.2.0) potentially affected by CVE-2026-32621 via @apollo/gateway (>=2.11.2, <=2.11.3)

@apollo/gateway NPM version =2.11.2, =11.1.14, =11.2.0 Source cves: CVE-2026-32621 Source advisory: OSV:GHSA-PFJJ-6F4P-RVMH...

@lenne.tech/nest-server (>=11.3.0, <=11.5.0) potentially affected by CVE-2026-32621 via @apollo/gateway (2.12.0)

@apollo/gateway NPM version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on @apollo/gateway and may be impacted: - @lenne.tech/nest-server =11.3.0, =11.5.0 Source cves: CVE-2026-32621 Source advisory: SNYK:JS-APOLLOGATEWAY-15612461...

@lenne.tech/nest-server (>=11.3.0, <=11.5.0) potentially affected by CVE-2026-32621 via @apollo/gateway (2.12.0)

@apollo/gateway NPM version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on @apollo/gateway and may be impacted: - @lenne.tech/nest-server =11.3.0, =11.5.0 Source cves: CVE-2026-32621 Source advisory: GHSA-PFJJ-6F4P-RVMH...

@apollo/gateway (>=2.13.0-preview.0, <=2.13.1) potentially affected by CVE-2026-32621 via @apollo/query-planner (>=2.13.0-preview.0, <=2.13.1)

@apollo/query-planner NPM version =2.13.0-preview.0, =2.13.0-preview.0, =2.13.1 Source cves: CVE-2026-32621 Source advisory: SNYK:JS-APOLLOQUERYPLANNER-15612460...

@genesisx/graphql (>=3.0.0-beta.1, <=4.0.1), @genesisx/graphql-utils (>=3.0.0-beta.0, <=3.0.1) +9 more potentially affected by CVE-2026-32621 via @apollo/gateway (>=2.0.0-preview.2, <=2.9.3)

@apollo/gateway NPM version =2.0.0-preview.2, =3.0.0-beta.1, =3.0.0-beta.0, =0.11.46-alpha-bad726532.0, =0.0.1, =8.6.7, =2.8.54, =0.0.0-preview-20220428090254, =0.0.0-preview-20221125005457, =1.3.3, =0.0.3, =1.0.48 - nestjs-registry 0.0.1 Source cves: CVE-2026-32621 Source advisory:...

@apollo/composition (>=2.12.0, <=2.12.2), @apollo/gateway (>=2.12.0, <=2.12.2) +5 more potentially affected by CVE-2026-32621 via @apollo/federation-internals (>=2.12.0, <=2.12.2)

@apollo/federation-internals NPM version =2.12.0, =2.12.0, =2.12.0, =2.12.0, =2.12.0, =2.12.0, =11.3.0, =1.0.0, =1.0.13 Source cves: CVE-2026-32621 Source advisory: GHSA-PFJJ-6F4P-RVMH...

@adobe-apimesh/mesh-builder (1.4.0-beta.5), @apollo/composition (>=2.3.0-beta.2, <=2.9.5) +19 more potentially affected by CVE-2026-32621 via @apollo/federation-internals (>=2.3.0-beta.2, <=2.9.5)

@apollo/federation-internals NPM version =2.3.0-beta.2, =2.3.0-beta.2, =2.3.0-beta.2, =2.3.0-beta.2, =2.3.0-beta.2, =2.3.0-beta.2, =3.0.0-beta.1, =3.0.0-beta.0, =0.13.8-alpha-20230126151930-d229ec52b, =0.10.7-alpha-20230126151930-d229ec52b, =0.0.1, =9.2.0, =3.11.1, =2.8.54,...

@adobe-apimesh/mesh-builder (1.4.0-beta.5), @apollo/composition (>=2.3.0-beta.2, <=2.9.5) +19 more potentially affected by CVE-2026-32621 via @apollo/federation-internals (>=2.3.0-beta.2, <=2.9.5)

@apollo/federation-internals NPM version =2.3.0-beta.2, =2.3.0-beta.2, =2.3.0-beta.2, =2.3.0-beta.2, =2.3.0-beta.2, =2.3.0-beta.2, =3.0.0-beta.1, =3.0.0-beta.0, =0.13.8-alpha-20230126151930-d229ec52b, =0.10.7-alpha-20230126151930-d229ec52b, =0.0.1, =9.2.0, =3.11.1, =2.8.54,...

@apollo/composition (>=2.10.0-alpha.0, <=2.10.4), @apollo/gateway (>=2.10.0-alpha.0, <=2.10.4) +6 more potentially affected by CVE-2026-32621 via @apollo/federation-internals (>=2.10.0-alpha.0, <=2.10.4)

@apollo/federation-internals NPM version =2.10.0-alpha.0, =2.10.0-alpha.0, =2.10.0-alpha.0, =2.10.0-alpha.0, =2.10.0-alpha.0, =2.10.0-alpha.0, =10.8.3, =11.1.13 - @pothos-examples/federation 3.1.13 - @pothos-examples/prisma-federation 3.1.24 Source cves: CVE-2026-32621 Source advisory:...

@apollo/composition (>=2.10.0, <=2.10.4), @apollo/gateway (>=2.10.0, <=2.10.4) +6 more potentially affected by CVE-2026-32621 via @apollo/federation-internals (>=2.10.0, <=2.10.4)

@apollo/federation-internals NPM version =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =10.8.3, =11.1.13 - @pothos-examples/federation 3.1.13 - @pothos-examples/prisma-federation 3.1.24 Source cves: CVE-2026-32621 Source advisory: GHSA-PFJJ-6F4P-RVMH...

@apollo/composition (>=2.11.0-preview.0, <=2.11.5), @apollo/gateway (>=2.11.0-preview.0, <=2.11.5) +5 more potentially affected by CVE-2026-32621 via @apollo/federation-internals (>=2.11.0-preview.0, <=2.11.5)

@apollo/federation-internals NPM version =2.11.0-preview.0, =2.11.0-preview.0, =2.11.0-preview.0, =2.11.0-preview.0, =2.11.0-preview.0, =2.11.0-preview.0, =11.1.14, =11.2.0 Source cves: CVE-2026-32621 Source advisory: SNYK:JS-APOLLOFEDERATIONINTERNALS-15612462...

@apollo/gateway (>=2.3.0-beta.2, <=2.9.5), @genesisx/graphql (>=3.0.0-beta.1, <=4.0.1) +8 more potentially affected by CVE-2026-32621 via @apollo/query-planner (>=2.3.0-beta.2, <=2.9.5)

@apollo/query-planner NPM version =2.3.0-beta.2, =2.3.0-beta.2, =3.0.0-beta.1, =3.0.0-beta.0, =0.13.8-alpha-20230126151930-d229ec52b, =0.0.1, =9.2.0, =2.8.54, =0.0.0-preview-20230314213245, =1.3.3, =0.0.8, =1.0.48 Source cves: CVE-2026-32621 Source advisory: SNYK:JS-APOLLOQUERYPLANNER-15612460...

@apollo/gateway (>=2.3.0-beta.2, <=2.9.5), @genesisx/graphql (>=3.0.0-beta.1, <=4.0.1) +8 more potentially affected by CVE-2026-32621 via @apollo/query-planner (>=2.3.0-beta.2, <=2.9.5)

@apollo/query-planner NPM version =2.3.0-beta.2, =2.3.0-beta.2, =3.0.0-beta.1, =3.0.0-beta.0, =0.13.8-alpha-20230126151930-d229ec52b, =0.0.1, =9.2.0, =2.8.54, =0.0.0-preview-20230314213245, =1.3.3, =0.0.8, =1.0.48 Source cves: CVE-2026-32621 Source advisory: GHSA-PFJJ-6F4P-RVMH...