apollo-router (cargo) has 13 known vulnerabilities, the worst rated CRITICAL. Upgrade to 2.12.1 or later to clear all of them. No malicious-package signal is recorded.
CyberXYZ does not call a package safe in absolute terms. It records 13 known vulnerabilities for apollo-router (cargo), the worst rated CRITICAL, and no malicious-package signal. Whether it is acceptable depends on the version you run.
Does apollo-router have known vulnerabilities?
Yes. CyberXYZ records 13 known vulnerabilities for apollo-router (cargo), the worst rated CRITICAL. These include GHSA-q9p4-hw9m-fj2v, GHSA-g8jh-vg5j-4h3f, GHSA-x33c-7c2v-mrj9, GHSA-3j43-9v8v-cp3f, GHSA-75m2-jhh5-j5g2.
Which version of apollo-router should I use?
2.12.1 or later clears every advisory recorded for apollo-router (cargo). Check the release you pick before installing it.
How do I check apollo-router before installing?
Search apollo-router in CyberXYZ Check at https://cyberxyz.io/check?q=apollo-router. The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.
Checked 2026-11-14 at 08:51 UTC. The most recent advisory here was published 2026-03-26. Updated continuously from NVD, GHSA, OSV and CNA feeds.