ME
Product
mercurius
3
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add mercurius to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-30241 | 8.2 | Mar 6 | Mercurius: queryDepth limit bypassed for WebSocket subscriptions Affected: < 16.8.0 |
| CVE-2023-22477 | 7.5 | Jan 9 | Mercurius is vulnerable to denial of service (DoS) when using subscriptions Affected: < 10.5.0 |
| CVE-2025-64166 | 5.4 | Mar 5 | Mercurius: Incorrect Content-Type parsing can lead to CSRF attack Affected: < 16.4.0 |
Showing 3