https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-32031.htmlhttps://patchthecve.com/cve/CVE-2025-32031.htmlWed, 17 Jun 2026 09:11:21 +0000HIGH 7.5: Apollo Gateway provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint. Prior to 2.10.1, a vulnerability in Apollo Gateway allowed queries with deeply nested and reused named fragments to be prohibitively expensive to query plan, specifically due to internal ophttps://patchthecve.com/cve/CVE-2025-32030.htmlhttps://patchthecve.com/cve/CVE-2025-32030.htmlWed, 17 Jun 2026 09:11:21 +0000HIGH 7.5: Apollo Gateway provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint. Prior to 2.10.1, a vulnerability in Apollo Gateway allowed queries with deeply nested and reused named fragments to be prohibitively expensive to query plan, specifically during named fragmhttps://patchthecve.com/cve/CVE-2024-43414.htmlhttps://patchthecve.com/cve/CVE-2024-43414.htmlWed, 17 Jun 2026 07:50:59 +0000HIGH 7.5: Apollo Federation is an architecture for declaratively composing APIs into a unified graph. Each team can own their slice of the graph independently, empowering them to deliver autonomously and incrementally. Instances of @apollo/query-planner >=2.0.0 and <2.8.5 are impacted by a denial-of-service v