mercurius-js vulnerabilities
4 published CVEs name mercurius-js among the affected products.
- 4Published CVEs4 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-30241
Mercurius: queryDepth limit bypassed for WebSocket subscriptions
mercurius-js · mercurius
Low2.7 - CVE-2025-64166
Mercurius: Incorrect Content-Type parsing can lead to CSRF attack
mercurius-js · mercurius
Medium5.4 - CVE-2023-22477
Mercurius is vulnerable to denial of service (DoS) when using subscriptions
mercurius-js · mercurius
Medium5.3 - CVE-2021-43801
Uncaught Exception in mercurius
mercurius-js · mercurius
High7.5