Security: apolloconfig/apollo
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Apollo ConfigService access key authentication bypass via raw config file appId parsingGHSA-h4pc-58cc-hc95 published
Jul 12, 2026 by nobodyiamHigh -
Apollo ConfigService access key authentication bypass via non-canonical appId matchingGHSA-4w3q-qpfq-v992 published
Jul 12, 2026 by nobodyiamHigh -
Apollo Portal release endpoint allows cross-application configuration disclosure via releaseIdGHSA-jxpj-9j24-w337 published
Jul 12, 2026 by nobodyiamModerate -
Potential unauthorized access issue in apollo-portalGHSA-c6c3-h4f7-3962 published
Aug 20, 2024 by nobodyiamLow -
Potential csrf issue in apollo-portalGHSA-fmxq-v8mg-qh25 published
Feb 18, 2023 by nobodyiamLow -
Potential access control security issue in eurekaGHSA-368x-wmmg-hq5c published
Feb 18, 2023 by nobodyiamLow -
Potential access control security issue in apollo-adminserviceGHSA-xpmx-h7xq-xffh published
Sep 10, 2020 by nobodyiamLow