mercurius-js vulnerabilities

4 published CVEs name mercurius-js among the affected products.

All 4 in the list Atom feed of new CVEs

Published CVEs: 4
Last 12 months: 2
Critical: 0
Known exploited: 0

Critical 0High 1Medium 2Low 1Not scored 0

CVEs per yearBy the year they were published

20211
20231
20262

Newest CVEs

CVE-2026-30241
Mercurius: queryDepth limit bypassed for WebSocket subscriptions
mercurius-js · mercurius
Low2.7
CVE-2025-64166
Mercurius: Incorrect Content-Type parsing can lead to CSRF attack
mercurius-js · mercurius
Medium5.4
CVE-2023-22477
Mercurius is vulnerable to denial of service (DoS) when using subscriptions
mercurius-js · mercurius
Medium5.3
CVE-2021-43801
Uncaught Exception in mercurius
mercurius-js · mercurius
High7.5

Products with the most CVEs

mercurius4

Most common weaknesses