mercurius-js

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

mercurius-js records in CISA KEV

No mercurius-js vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2023-08726 CVE-2023-22477 · GHSA-cm8h-q92v-xcfc

HIGH 72

Mercurius is a GraphQL adapter for Fastify.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01086 Published 2023-01-09 Fixed in 10.5.0, 11.5.0 +1 CWE-248

TI-2025-39610 CVE-2025-64166 · GHSA-v66j-6wwf-jc57

MEDIUM 58

Mercurius is a GraphQL adapter for Fastify.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00184 Published 2026-03-05 Fixed in 16.4.0 CWE-352

TI-2021-19607 CVE-2021-43801 · GHSA-273r-rm8g-7f3x

LOW 36

Mercurius is a GraphQL adapter for Fastify.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01572 Published 2021-12-13 Fixed in 8.11.2 CWE-754

TI-2026-23474 CVE-2026-30241 · GHSA-m4h2-mjfm-mp55

LOW 20

Mercurius is a GraphQL adapter for Fastify.

CVSS 4.0LOW 2.7 Network No auth No interaction EPSS 0.00402 Published 2026-03-06 Fixed in 16.8.0 CWE-863