mercurius vulnerabilities and fixes

Recent CVEs affecting mercurius, with upgrade or downgrade steps. 2 tracked.

mercurius has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-03-06. Highest priority: CVE-2026-30241 (score 42/100).

• CVE-2026-30241 HIGH 8.2 UPGRADE Mercurius is a GraphQL adapter for Fastify
• CVE-2025-64166 MEDIUM 5.4 UPGRADE Mercurius is a GraphQL adapter for Fastify

FAQ

How do I fix mercurius vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mercurius being exploited right now?

None of the tracked mercurius CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mercurius CVE should I patch first?

CVE-2026-30241 currently ranks highest (42/100): Mercurius is a GraphQL adapter for Fastify.

← Back to latest CVEs