Vulnerabilities

TI-2026-23474 CVE-2026-30241 · GHSA-m4h2-mjfm-mp55

Mercurius: queryDepth limit bypassed for WebSocket subscriptions

LOW 20

Mercurius is a GraphQL adapter for Fastify.

CVSS 4.0LOW 2.7 Network No auth No interaction EPSS 0.00402 Published 2026-03-06 Fixed in 16.8.0 CWE-863

TI-2025-39610 CVE-2025-64166 · GHSA-v66j-6wwf-jc57

MEDIUM 58

Mercurius is a GraphQL adapter for Fastify.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00184 Published 2026-03-05 Fixed in 16.4.0 CWE-352

TI-2023-08726 CVE-2023-22477 · GHSA-cm8h-q92v-xcfc

HIGH 72

Mercurius is a GraphQL adapter for Fastify.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01086 Published 2023-01-09 Fixed in 10.5.0, 11.5.0 +1 CWE-248

TI-2021-19607 CVE-2021-43801 · GHSA-273r-rm8g-7f3x

LOW 36

Mercurius is a GraphQL adapter for Fastify.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01572 Published 2021-12-13 Fixed in 8.11.2 CWE-754