tocsin

CVE-2026-32621

3 advisories.

npm/@apollo/federation-internals CVE-2026-32621: critical 9.9, EPSS 0.62%

Apollo Federation vulnerable to prototype pollution via incomplete key sanitization

Action: Upgrade @apollo/federation-internals to 2.9.6 or later.

npm i @apollo/federation-internals@2.9.6
npm i @apollo/federation-internals@2.10.5
npm i @apollo/federation-internals@2.11.6
npm i @apollo/federation-internals@2.12.3
npm i @apollo/federation-internals@2.13.2

Affected

introducedfixedlast affected
02.9.6-
2.10.02.10.5-
2.11.02.11.6-
2.12.02.12.3-
2.13.02.13.2-

Fixed versions

2.9.62.10.52.11.62.12.32.13.2

Sources

CVE-2026-32621 · published · modified · JSON

npm/@apollo/gateway CVE-2026-32621: critical 9.9, EPSS 0.62%

Apollo Federation vulnerable to prototype pollution via incomplete key sanitization

Action: Upgrade @apollo/gateway to 2.9.6 or later.

npm i @apollo/gateway@2.9.6
npm i @apollo/gateway@2.10.5
npm i @apollo/gateway@2.11.6
npm i @apollo/gateway@2.12.3
npm i @apollo/gateway@2.13.2

Affected

introducedfixedlast affected
02.9.6-
2.10.02.10.5-
2.11.02.11.6-
2.12.02.12.3-
2.13.02.13.2-

Fixed versions

2.9.62.10.52.11.62.12.32.13.2

Sources

CVE-2026-32621 · published · modified · JSON

npm/@apollo/query-planner CVE-2026-32621: critical 9.9, EPSS 0.62%

Apollo Federation vulnerable to prototype pollution via incomplete key sanitization

Action: Upgrade @apollo/query-planner to 2.9.6 or later.

npm i @apollo/query-planner@2.9.6
npm i @apollo/query-planner@2.10.5
npm i @apollo/query-planner@2.11.6
npm i @apollo/query-planner@2.12.3
npm i @apollo/query-planner@2.13.2

Affected

introducedfixedlast affected
02.9.6-
2.10.02.10.5-
2.11.02.11.6-
2.12.02.12.3-
2.13.02.13.2-

Fixed versions

2.9.62.10.52.11.62.12.32.13.2

Sources

CVE-2026-32621 · published · modified · JSON