Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/%40directus/api@32.1.1
purl pkg:npm/%40directus/api@32.1.1
Next non-vulnerable version 32.2.0
Latest non-vulnerable version 32.2.0
Risk score 2.4
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-jr94-gj3h-c8rf
Aliases:
CVE-2026-26185
Directus Vulnerable to User Enumeration via Password Reset Timing Attack ### Summary A timing-based user enumeration vulnerability exists in the …
32.2.0
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-3573-4c68-g8cc
Directus has open redirect in SAML ## Security Advisory: Open Redirect in Directus SAML Authentication ### Summary An open redirect … CVE-2026-22032