Search for packages
| purl | pkg:npm/directus@10.10.7 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-8jpw-gpr4-8cmh
Aliases: CVE-2025-64748 |
Directus's conceal fields are searchable if read permissions enabled ## Summary A vulnerability allows authenticated users to search concealed/sensitive fields … |
Vulnerable |
|
GHSA-9x5g-62gj-wqf2
Aliases: CVE-2025-64746 |
Directus has Improper Permission Handling on Deleted Fields ### Summary Directus does not properly clean up field-level permissions when a … |
Vulnerable |
|
GHSA-cph6-524f-3hgr
Aliases: CVE-2025-64749 |
Directus Vulnerable to Information Leakage in Existing Collections ### Summary: An observable difference in error messaging was found in the … |
Vulnerable |
|
GHSA-vv2v-pw69-8crf
Aliases: CVE-2025-64747 |
Directus is Vulnerable to Stored Cross-site Scripting ### Summary A stored cross-site scripting (XSS) vulnerability exists that allows users with … |
Vulnerable |
|
GHSA-x3vm-88hf-gpxp
Aliases: CVE-2025-53885 |
Directus is vulnerable to sensitive data exposure as user data is not being redacted when logged ### Summary When using … |
Vulnerable |
|
GHSA-rmjh-cf9q-pv7q
Aliases: CVE-2025-53887 |
Directus' exact version number is exposed by the OpenAPI Spec ### Summary The exact Directus version number is incorrectly being … |
Vulnerable |
|
GHSA-7cvf-pxgp-42fc
Aliases: CVE-2025-53889 |
Directus' insufficient permission checks can enable unauthenticated users to manually trigger Flows ### Summary Directus Flows with a manual trigger … |
Vulnerable |
|
GHSA-f24x-rm6g-3w5v
Aliases: CVE-2025-53886 |
Directus tokens are not redacted in flow logs, exposing session credentials to all admin ### Summary When using Directus Flows … |
Vulnerable |
|
GHSA-mv33-9f6j-pfmc
Aliases: CVE-2025-55746 |
Directus allows unauthenticated file upload and file modification due to lacking input sanitization ## Summary A vulnerability exists in the … |
Vulnerable |
|
GHSA-j8xj-7jff-46mx
Aliases: CVE-2025-30225 |
Directus's S3 assets become unavailable after a burst of malformed transformations ### Summary When making many malformed transformation requests at … |
Vulnerable |
|
GHSA-7wq3-jr35-275c
Aliases: CVE-2025-30352 |
Directus `search` query parameter allows enumeration of non permitted fields ### Summary The `search` query parameter allows users with access … |
Vulnerable |
|
GHSA-56p6-qw3c-fq2g
Aliases: CVE-2025-30351 |
Suspended Directus user can continue to use session token to access API ### Summary Since the user status is not … |
Vulnerable |
|
GHSA-fm3h-p9wm-h74h
Aliases: CVE-2025-30353 |
Directus's webhook trigger flows can leak sensitive data ### Describe the Bug In Directus, when a **Flow** with the "_Webhook_" … |
Vulnerable |
|
GHSA-rv78-qqrq-73m5
Aliases: CVE-2025-30350 |
Directus's S3 assets become unavailable after a burst of HEAD requests ### Summary There's some tools that use Directus to … |
Vulnerable |
|
GHSA-pmf4-v838-29hg
Aliases: CVE-2025-24353 |
Directus allows privilege escalation using Share feature ### Summary When sharing an item, user can specify an arbitrary role. It … |
Vulnerable |
|
GHSA-r6wx-627v-gh2f
Aliases: CVE-2024-54128 |
Directus has an HTML Injection in Comment ### Summary The Comment feature has implemented a filter to prevent users from … |
Vulnerable |
|
GHSA-632p-p495-25m5
Aliases: CVE-2024-36128 |
Directus is soft-locked by providing a string value to random string util ### Describe the Bug Providing a non-numeric length … |
Vulnerable |
|
GHSA-g65h-35f3-x2w3
Aliases: CVE-2024-34709 |
Directus Lacks Session Tokens Invalidation ### Summary Currently session tokens function like the other JWT tokens where they are not … |
Vulnerable |
|
GHSA-p8v3-m643-4xqx
Aliases: CVE-2024-34708 |
Directus allows redacted data extraction on the API through "alias" ## Summary A user with permission to view any collection … |
Vulnerable |
|
GHSA-jgf4-vwc3-r46v
Aliases: CVE-2024-39896 |
Directus Allows Single Sign-On User Enumeration ### Impact When relying on SSO providers in combination with local authentication it can … |
Vulnerable |
|
GHSA-q83v-hq3j-4pq3
|
Duplicate Advisory: Improper access control in Directus ## Duplicate Advisory This advisory has been withdrawn because it is a duplicate … | There are no reported fixed by versions. |
|
GHSA-3fff-gqw3-vj86
Aliases: CVE-2024-6534 |
Directus has an insecure object reference via PATH presets ### Impact Directus v10.13.0 allows an authenticated external attacker to modify … |
Vulnerable |
|
GHSA-qf6h-p3mr-vmh5
|
Duplicate Advisory: Code injection in Directus ## Duplicate Advisory This advisory has been withdrawn because it is a duplicate of … | There are no reported fixed by versions. |
|
GHSA-68g8-c275-xf2m
Aliases: CVE-2024-46990 |
Directus vulnerable to SSRF Loopback IP filter bypass ### Impact If you're relying on blocking access to localhost using the … | There are no reported fixed by versions. |
|
GHSA-cff8-x7jv-4fm8
Aliases: CVE-2024-45596 |
Session is cached for OpenID and OAuth2 if `redirect` is not used ### Summary Unauthenticated user can access credentials of … | There are no reported fixed by versions. |
|
GHSA-qqmv-5p3g-px89
Aliases: CVE-2026-35412 |
Directus: TUS Upload Authorization Bypass Allows Arbitrary File Overwrite ## Summary Directus' TUS resumable upload endpoint (`/files/tus`) allows any authenticated … |
Vulnerable |
|
GHSA-393c-p46r-7c95
Aliases: CVE-2026-39942 |
Directus: Path Traversal and Broken Access Control in File Management API ## Summary A broken access control vulnerability was identified … |
Vulnerable |
|
GHSA-6q22-g298-grjh
|
Directus: Unauthenticated Denial of Service via GraphQL Alias Amplification of Expensive Health Check Resolver ## Summary The GraphQL specification permits … |
Vulnerable |
|
GHSA-mvv8-v4jj-g47j
Aliases: CVE-2026-39943 |
Directus: Sensitive fields exposed in revision history ### Summary Directus stores revision records (in `directus_revisions`) whenever items are created or … |
Vulnerable |
|
GHSA-q75c-4gmv-mg9x
Aliases: CVE-2026-35411 |
Directus: Open Redirect in Admin 2FA Setup Page ### Summary Directus is vulnerable to an Open Redirect via the redirect … |
Vulnerable |
|
GHSA-38hg-ww64-rrwc
Aliases: CVE-2026-35442 |
Directus: Authenticated Users Can Extract Concealed Fields via Aggregate Queries ### Summary Aggregate functions (`min`, `max`) applied to fields with … |
Vulnerable |
|
GHSA-cf45-hxwj-4cfj
Aliases: CVE-2026-35410 |
Directus: Open Redirect via Parser Bypass in OAuth2/SAML Authentication Flow ### Summary An open redirect vulnerability exists in the login … |
Vulnerable |
|
GHSA-ph52-67fq-75wj
Aliases: CVE-2026-35441 |
Directus: GraphQL Alias Amplification Denial of Service Due to Missing Query Cost/Complexity Limits ### Summary Directus' GraphQL endpoints (`/graphql` and … |
Vulnerable |
|
GHSA-wxwm-3fxv-mrvx
Aliases: CVE-2026-35413 |
Directus: GraphQL Schema SDL Disclosure Setting ## Summary When `GRAPHQL_INTROSPECTION=false` is configured, Directus correctly blocks standard GraphQL introspection queries (`__schema`, … |
Vulnerable |
|
GHSA-8m32-p958-jg99
Aliases: CVE-2026-35408 |
Directus: Missing Cross-Origin Opener Policy ## Summary Directus's Single Sign-On (SSO) login pages lacked a `Cross-Origin-Opener-Policy` (COOP) HTTP response header. … |
Vulnerable |
|
GHSA-wv3h-5fx7-966h
Aliases: CVE-2026-35409 |
Directus: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses in File Import ### Summary A Server-Side Request Forgery (SSRF) protection bypass … |
Vulnerable |
|
GHSA-jr94-gj3h-c8rf
Aliases: CVE-2026-26185 |
Directus Vulnerable to User Enumeration via Password Reset Timing Attack ### Summary A timing-based user enumeration vulnerability exists in the … |
Vulnerable |
|
GHSA-3573-4c68-g8cc
Aliases: CVE-2026-22032 |
Directus has open redirect in SAML ## Security Advisory: Open Redirect in Directus SAML Authentication ### Summary An open redirect … |
Vulnerable |
|
GHSA-c6w9-5g5j-jh2p
Aliases: CVE-2026-61836 |
Directus: Authorization-dependent response served from unsegmented cache key ## Summary When response caching is enabled (`CACHE_ENABLED=true`), the cache-key derivation in … |
Not vulnerable |
|
GHSA-j5h6-vqc3-phqh
Aliases: CVE-2026-61835 |
Directus: SSRF Protection Bypass via 0.0.0.0 in File Import ### Summary The SSRF protection on Directus's file-import-from-URL feature can be … |
Not vulnerable |
|
GHSA-9qrm-48qf-r2rw
Aliases: CVE-2024-6533 |
Directus has a DOM-Based cross-site scripting (XSS) via layout_options ### Impact Directus allows an authenticated attacker to save cross site … |
Vulnerable Vulnerable |