Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/%40directus/app@12.0.0
purl pkg:npm/%40directus/app@12.0.0
Next non-vulnerable version 13.3.1
Latest non-vulnerable version 13.3.1
Risk score 2.5
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-pmf4-v838-29hg
Aliases:
CVE-2025-24353
Directus allows privilege escalation using Share feature ### Summary When sharing an item, user can specify an arbitrary role. It …
13.3.1
Not vulnerable
GHSA-r6wx-627v-gh2f
Aliases:
CVE-2024-54128
Directus has an HTML Injection in Comment ### Summary The Comment feature has implemented a filter to prevent users from …
13.3.1
Not vulnerable
This package is not known to fix any advisories.