Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/%40directus/api@32.0.0
purl pkg:npm/%40directus/api@32.0.0
Next non-vulnerable version 32.2.0
Latest non-vulnerable version 32.2.0
Risk score 2.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-jr94-gj3h-c8rf
Aliases:
CVE-2026-26185
Directus Vulnerable to User Enumeration via Password Reset Timing Attack ### Summary A timing-based user enumeration vulnerability exists in the …
32.2.0
Not vulnerable
GHSA-3573-4c68-g8cc
Aliases:
CVE-2026-22032
Directus has open redirect in SAML ## Security Advisory: Open Redirect in Directus SAML Authentication ### Summary An open redirect …
32.1.1
Vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-8jpw-gpr4-8cmh
Directus's conceal fields are searchable if read permissions enabled ## Summary A vulnerability allows authenticated users to search concealed/sensitive fields … CVE-2025-64748
GHSA-cph6-524f-3hgr
Directus Vulnerable to Information Leakage in Existing Collections ### Summary: An observable difference in error messaging was found in the … CVE-2025-64749