ME
Product
mercurius
by mercurius-js · last CVE Mar 6, 2026
2
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add mercurius to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-30241
8.2
0%
Mar 6
Mercurius: queryDepth limit bypassed for WebSocket subscriptions
Affected: < 16.8.0
CVE-2025-64166
5.4
0%
Mar 5
Mercurius: Incorrect Content-Type parsing can lead to CSRF attack
Affected: < 16.4.0
Showing 2