---
id: 1623
title: "Secure your Apollo GraphQL server with Semgrep"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2023/08/29/secure-your-apollo-graphql-server-with-semgrep/"
published_at: "2023-08-29T12:00:14Z"
tags: ["graphql", "csrf", "static-analysis", "semgrep", "apollo-server", "cors"]
phying_url: "https://phying.com/item/1623"
lang: en
---

# Secure your Apollo GraphQL server with Semgrep

## Summary

Trail of Bits added nine Semgrep rules to detect CSRF, rate-limiting, and CORS misconfigurations in Apollo GraphQL server v3 and v4, with guidance on fixing common GraphQL security flaws.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2023-08-29T12:00:14Z
- **Original:** https://blog.trailofbits.com/2023/08/29/secure-your-apollo-graphql-server-with-semgrep/
- **Phying News:** https://phying.com/item/1623