releases.shpreview
Apollo GraphQL/Apollo Federation/@apollo/gateway@2.9.6

@apollo/gateway@2.9.6

$npx -y @buildinternet/releases show rel_Q-wAyEN8989A8UoQVFnF7

Patch Changes

  • Fixed several code paths that access response objects to prevent JavaScript prototype pollution and unintended access to the prototype chain. (#3400)

    See the associated GitHub Advisories GHSA-pfjj-6f4p-rvmh for more information.

  • Updated dependencies [b51586d4a5c891f8832e78f8415d798282567831]:

    • @apollo/query-planner@2.9.6
    • @apollo/federation-internals@2.9.6
    • @apollo/composition@2.9.6

Fetched April 11, 2026