HIGH7.5npm
GHSA-273r-rm8g-7f3x· CVE-2021-43801Uncaught Exception in mercurius
Modified: 7/8/2026
package
npm/mercurius
pkg:npm/mercurius
MEDIUM5.3npm
GHSA-cm8h-q92v-xcfc· CVE-2023-22477mercurius has Uncaught Exception when using subscriptions
Modified: 11/8/2023
LOWnpm
GHSA-m4h2-mjfm-mp55· CVE-2026-30241Mercurius's queryDepth limit bypassed for WebSocket subscriptions
Modified: 3/9/2026
MEDIUM5.4npm
GHSA-v66j-6wwf-jc57· CVE-2025-64166Mercurius: Incorrect Content-Type parsing can lead to CSRF attack
Modified: 3/5/2026