Vulnerabilities in mercurius-js

4 results

CVE-2021-43801HIGHUncaught Exception in mercuriusEPSS 1.5%CVE-2023-22477MEDIUMMercurius is vulnerable to denial of service (DoS) when using subscriptionsEPSS 1.1%CVE-2026-30241LOWMercurius: queryDepth limit bypassed for WebSocket subscriptionsEPSS 0.4%CVE-2025-64166MEDIUMMercurius: Incorrect Content-Type parsing can lead to CSRF attackEPSS 0.2%