CVE-2025-64530
1 advisory.
npm/@apollo/composition CVE-2025-64530: high 7.5
@apollo/composition has Improper Enforcement of Access Control on Interface Types and Fields
Action: Upgrade @apollo/composition to 2.9.5 or later.
npm i @apollo/composition@2.9.5npm i @apollo/composition@2.10.4npm i @apollo/composition@2.11.5npm i @apollo/composition@2.12.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9.5 | - |
| 2.10.0-alpha.3 | 2.10.4 | - |
| 2.11.0-preview.1 | 2.11.5 | - |
| 2.12.0-preview.1 | 2.12.1 | - |
Fixed versions
| 2.9.5 | 2.10.4 | 2.11.5 | 2.12.1 |
Sources
- osv: GHSA-mx7m-j9xf-62hw
- https://github.com/apollographql/federation/security/advisories/GHSA-mx7m-j9xf-62hw
- https://nvd.nist.gov/vuln/detail/CVE-2025-64530
- https://github.com/apollographql/federation/pull/3340
- https://github.com/apollographql/federation/pull/3341
- https://github.com/apollographql/federation/pull/3343
- https://github.com/apollographql/federation
CVE-2025-64530 · published · modified · JSON