Log in Start free

mercurius-js

Products

ProductCVEsExploitedLatest
mercurius4–Mar 6, 2026

Exploited and recent CVEs

  • CVE-2026-30241 Low 2.7 Mercurius: queryDepth limit bypassed for WebSocket subscriptions 0.4%
  • CVE-2025-64166 Medium 5.4 Mercurius: Incorrect Content-Type parsing can lead to CSRF attack 0.2%
  • CVE-2023-22477 Medium 5.3 Mercurius is vulnerable to denial of service (DoS) when using subscriptions 1.1%
  • CVE-2021-43801 High 7.5 Uncaught Exception in mercurius 1.6%