Mercurius Project Mercurius
4 CVEs affecting Mercurius Project Mercurius. Latest disclosed: 2026-03-06. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-30241 | High | 8.2 | 2026-03-06 | Mercurius is a GraphQL adapter for Fastify. Prior to version 16.8.0, Mercurius fails to enforce the configured queryDepth limit on GraphQL subscription queries… |
CVE-2021-43801 | High | 7.5 | 2021-12-13 | Mercurius is a GraphQL adapter for Fastify. Any users from Mercurius@8.10.0 to 8.11.1 are subjected to a denial of service attack by sending a malformed JSON t… |
CVE-2025-64166 | Medium | 5.4 | 2026-03-05 | Mercurius is a GraphQL adapter for Fastify. Prior to version 16.4.0, a cross-site request forgery (CSRF) vulnerability was identified. The issue arises from in… |
CVE-2023-22477 | Medium | 5.3 | 2023-01-09 | Mercurius is a GraphQL adapter for Fastify. Any users of Mercurius until version 10.5.0 are subjected to a denial of service attack by sending a malformed pack… |