ME
Vendor
mercurius-js
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-30241 | ME mercurius mercurius-js | 8.2 | Mar 6 | Mercurius: queryDepth limit bypassed for WebSocket subscriptions |
| CVE-2025-64166 | ME mercurius mercurius-js | 5.4 | Mar 5 | Mercurius: Incorrect Content-Type parsing can lead to CSRF attack |