This repo hosts the source for Apollo Studio's Embeddable Sandbox
90%
Total Score
100
100
100
100
50
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10673 @apollo/sandbox is vulnerable to Cross-Site Request Forgery (CSRF) in versions 0.1.0 - 2.7.2. | 0.1.0 - 2.7.2 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
graphql-ws Version ^5.9.0 | — | — |
eventemitter3 Version 3.1.0 | — | — |
whatwg-mimetype Version ^3.0.0 | — | — |
zen-observable-ts Version ^1.1.0 | — | — |
@types/whatwg-mimetype Version ^3.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

SOC 2Compliant
ISO 27001Compliant