Mercurius Project vulnerabilities

Products

• Mercurius 4

Newest

• mercurius-js mercurius Mercurius: queryDepth limit bypassed for WebSocket subscriptions CVE-2026-30241 Fix available 2.7 LowMarch 6, 2026
• mercurius-js mercurius Mercurius: Incorrect Content-Type parsing can lead to CSRF attack CVE-2025-64166 Fix available 5.4 MediumMarch 5, 2026
• mercurius-js mercurius Mercurius is vulnerable to denial of service (DoS) when using subscriptions CVE-2023-22477 Fix available 5.3 MediumJanuary 9, 2023
• mercurius-js mercurius Uncaught Exception in mercurius CVE-2021-43801 Fix available 7.5 HighDecember 13, 2021