mercurius-js mercurius

• CVE-2026-30241 Low 2.7 Mercurius: queryDepth limit bypassed for WebSocket subscriptions 0.4%
• CVE-2025-64166 Medium 5.4 Mercurius: Incorrect Content-Type parsing can lead to CSRF attack 0.2%
• CVE-2023-22477 Medium 5.3 Mercurius is vulnerable to denial of service (DoS) when using subscriptions 1.1%
• CVE-2021-43801 High 7.5 Uncaught Exception in mercurius 1.6%