Lucene search
+L

444 matches found

OSV
OSV
•added 2026/02/04 7:18 p.m.•16 views

CVE-2026-23897 Apollo Server is vulnerable to denial of service with `startStandaloneServer`

Apollo Server is an open-source, spec-compliant GraphQL server that's compatible with any GraphQL client, including Apollo Client. In versions from 2.0.0 to 3.13.0, 4.2.0 to before 4.13.0, and 5.0.0 to before 5.4.0, the default configuration of startStandaloneServer from @apollo/server/standalone...

7.5CVSS5.4AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/02/04 7:18 p.m.•13 views

CVE-2026-23897 Apollo Server is vulnerable to denial of service with `startStandaloneServer`

Apollo Server is an open-source, spec-compliant GraphQL server that's compatible with any GraphQL client, including Apollo Client. In versions from 2.0.0 to 3.13.0, 4.2.0 to before 4.13.0, and 5.0.0 to before 5.4.0, the default configuration of startStandaloneServer from @apollo/server/standalone...

7.5CVSS5.8AI score0.00699EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/02/04 7:18 p.m.•76 views

EUVD-2026-5364

Apollo Server is an open-source, spec-compliant GraphQL server that's compatible with any GraphQL client, including Apollo Client. In versions from 2.0.0 to 3.13.0, 4.2.0 to before 4.13.0, and 5.0.0 to before 5.4.0, the default configuration of startStandaloneServer from @apollo/server/standalone...

7.5CVSS5.4AI score0.00699EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/02/04 7:18 p.m.•76 views

CVE-2026-23897 Apollo Server is vulnerable to denial of service with `startStandaloneServer`

Apollo Server is an open-source, spec-compliant GraphQL server that's compatible with any GraphQL client, including Apollo Client. In versions from 2.0.0 to 3.13.0, 4.2.0 to before 4.13.0, and 5.0.0 to before 5.4.0, the default configuration of startStandaloneServer from @apollo/server/standalone...

7.5CVSS0.00699EPSS
SaveExploits0References3
OSV
OSV
•added 2026/02/04 6:02 p.m.•14 views

GHSA-MP6Q-XF9X-FWF7 Apollo Serve vulnerable to Denial of Service with `startStandaloneServer`

Impact The default configuration of startStandaloneServer from @apollo/server/standalone is vulnerable to Denial of Service DoS attacks through specially crafted request bodies with exotic character set encodings. This issue does not affect users that use @apollo/server as a dependency for...

7.5CVSS5.8AI score0.00699EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/02/04 6:02 p.m.•39 views

Apollo Serve vulnerable to Denial of Service with `startStandaloneServer`

Impact The default configuration of startStandaloneServer from @apollo/server/standalone is vulnerable to Denial of Service DoS attacks through specially crafted request bodies with exotic character set encodings. This issue does not affect users that use @apollo/server as a dependency for...

7.5CVSS5.7AI score0.00699EPSS
SaveExploits0References5Affected Software2
Positive Technologies
Positive Technologies
•added 2026/02/04 12:00 a.m.•20 views

PT-2026-6185

Name of the Vulnerable Software and Affected Versions Apollo Server versions 2.0.0 through 3.13.0 Apollo Server versions 4.2.0 through 4.13.0 Apollo Server versions 5.0.0 through 5.4.0 Description Apollo Server, a GraphQL server, is susceptible to denial of service DoS attacks. This occurs due to...

7.5CVSS5.8AI score0.00699EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/02/04 12:00 a.m.•15 views

PT-2026-6451

Impact The default configuration of startStandaloneServer from @apollo/server/standalone is vulnerable to Denial of Service DoS attacks through specially crafted request bodies with exotic character set encodings. This issue does not affect users that use @apollo/server as a dependency for...

7.5CVSS5.6AI score0.00699EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/01/23 12:00 a.m.•17 views

libexpat code issue vulnerabilities

libexpat is a streaming XML parser written in C language by the libexpat team. Versions of libexpat prior to 2.7.4 had code vulnerabilities; these vulnerabilities stemmed from the XMLExternalEntityParserCreate function not copying user data for unknown encoding processors...

2.9CVSS6.6AI score0.00189EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/20 12:00 a.m.•12 views

MiracleLinux 8 : dotnet-2.1.522-1.0.1.el8 (AXSA:2021-1571:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1571:03 advisory. dotnet: System.Text.Encodings.Web Remote Code Execution CVE-2021-26701 Tenable has extracted the preceding description block directly from the MiracleLinux...

9.8CVSS8.1AI score0.30096EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•7 views

MiracleLinux 3 : mod_auth_mysql-3.0.0-3.2AXS3 (AXSA:2009-20:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2009-20:01 advisory. modauthmysql can be used to limit access to documents served by a web server by checking data in a MySQL database. Fixed bugs: CVE-2008-2384 SQL injection...

7.5CVSS6.7AI score0.01863EPSS
SaveExploits1References2
Fedora
Fedora
•added 2025/10/10 12:51 a.m.•18 views

[SECURITY] Fedora 42 Update: ibus-bamboo-0.8.4~RC6-2.fc42

A Vietnamese IME for IBus using Bamboo Engine. The open source Vietnamese keyboard supports most common encodings, popular Vietnamese typing methods, smart diacritics, spell checking, shortcuts,...

6.5CVSS6.6AI score0.0055EPSS
SaveExploits1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2007-2681

Malware in sbrugna...

7.8CVSS6.4AI score0.01959EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2009-2930

Malware in sbrugna...

7.5CVSS6.1AI score0.02207EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2009-1207

Malware in sbrugna...

7.5CVSS6.2AI score0.01955EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•5 views

EUVD-2008-0426

Malware in sbrugna...

4.3CVSS8.9AI score0.0162EPSS
SaveExploits1References34
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2011-1937

Malware in sbrugna...

9.8CVSS9.3AI score0.03858EPSS
SaveExploits2References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2001-1294

Malware in sbrugna...

7.5CVSS6.4AI score0.03945EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2018-0691

Malware in sbrugna...

5.3CVSS6.4AI score0.02917EPSS
SaveExploits0References18
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2008-5328

Malware in sbrugna...

7.5CVSS7.4AI score0.03426EPSS
SaveExploits1References45
Rows per page
Query Builder