Search for packages
| purl | pkg:npm/directus@9.0.0-rc.54 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-8jpw-gpr4-8cmh
Aliases: CVE-2025-64748 |
Directus's conceal fields are searchable if read permissions enabled ## Summary A vulnerability allows authenticated users to search concealed/sensitive fields … |
Vulnerable |
|
GHSA-9x5g-62gj-wqf2
Aliases: CVE-2025-64746 |
Directus has Improper Permission Handling on Deleted Fields ### Summary Directus does not properly clean up field-level permissions when a … |
Vulnerable |
|
GHSA-cph6-524f-3hgr
Aliases: CVE-2025-64749 |
Directus Vulnerable to Information Leakage in Existing Collections ### Summary: An observable difference in error messaging was found in the … |
Vulnerable |
|
GHSA-vv2v-pw69-8crf
Aliases: CVE-2025-64747 |
Directus is Vulnerable to Stored Cross-site Scripting ### Summary A stored cross-site scripting (XSS) vulnerability exists that allows users with … |
Vulnerable |
|
GHSA-rmjh-cf9q-pv7q
Aliases: CVE-2025-53887 |
Directus' exact version number is exposed by the OpenAPI Spec ### Summary The exact Directus version number is incorrectly being … |
Vulnerable |
|
GHSA-7cvf-pxgp-42fc
Aliases: CVE-2025-53889 |
Directus' insufficient permission checks can enable unauthenticated users to manually trigger Flows ### Summary Directus Flows with a manual trigger … |
Vulnerable |
|
GHSA-f24x-rm6g-3w5v
Aliases: CVE-2025-53886 |
Directus tokens are not redacted in flow logs, exposing session credentials to all admin ### Summary When using Directus Flows … |
Vulnerable |
|
GHSA-7wq3-jr35-275c
Aliases: CVE-2025-30352 |
Directus `search` query parameter allows enumeration of non permitted fields ### Summary The `search` query parameter allows users with access … |
Vulnerable |
|
GHSA-pmf4-v838-29hg
Aliases: CVE-2025-24353 |
Directus allows privilege escalation using Share feature ### Summary When sharing an item, user can specify an arbitrary role. It … |
Vulnerable |
|
GHSA-xmjj-3c76-5w84
Aliases: CVE-2022-24814 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in directus ### Impact Unauthorized JavaScript can be executed by … |
Vulnerable |
|
GHSA-g27j-74fp-xfpr
Aliases: CVE-2022-26969 |
Insecure default value for CORS configuration ### Impact The default value for the `CORS_ENABLED` and `CORS_ORIGIN` configuration was set to … |
Vulnerable |
|
GHSA-5h75-pvq4-82c9
Aliases: CVE-2022-23080 |
Server-Side Request Forgery in Directus Directus versions v9.0.0-beta.2 through 9.6.0 are vulnerable to server-side request forgery (SSRF) in the media … |
Vulnerable |
|
GHSA-77qm-wvqq-fg79
Aliases: CVE-2022-36031 |
Directus vulnerable to unhandled exception on illegal filename_disk value The Directus process can be aborted by having an authorized user … |
Vulnerable |
|
GHSA-632p-p495-25m5
Aliases: CVE-2024-36128 |
Directus is soft-locked by providing a string value to random string util ### Describe the Bug Providing a non-numeric length … |
Vulnerable |
|
GHSA-p8v3-m643-4xqx
Aliases: CVE-2024-34708 |
Directus allows redacted data extraction on the API through "alias" ## Summary A user with permission to view any collection … |
Vulnerable |
|
GHSA-q83v-hq3j-4pq3
|
Duplicate Advisory: Improper access control in Directus ## Duplicate Advisory This advisory has been withdrawn because it is a duplicate … | There are no reported fixed by versions. |
|
GHSA-3fff-gqw3-vj86
Aliases: CVE-2024-6534 |
Directus has an insecure object reference via PATH presets ### Impact Directus v10.13.0 allows an authenticated external attacker to modify … |
Vulnerable |
|
GHSA-qf6h-p3mr-vmh5
|
Duplicate Advisory: Code injection in Directus ## Duplicate Advisory This advisory has been withdrawn because it is a duplicate of … | There are no reported fixed by versions. |
|
GHSA-2ccr-g2rv-h677
Aliases: CVE-2024-28238 |
Session Token in URL in directus ### Impact When reaching the /files page, a JWT is passed via GET request. … |
Vulnerable |
|
GHSA-5mhg-wv8w-p59j
Aliases: CVE-2024-27296 |
Directus version number disclosure ### Impact Currently the exact Directus version number is being shipped in compiled JS bundles which … |
Vulnerable |
|
GHSA-qw9g-7549-7wg5
Aliases: CVE-2024-27295 |
Directus has MySQL accent insensitive email matching ## Password reset vulnerable to accent confusion The password reset mechanism of the … |
Vulnerable |
|
GHSA-fr3w-2p22-6w7p
Aliases: CVE-2024-28239 |
URL Redirection to Untrusted Site in OAuth2/OpenID in directus ### Summary The authentication API has a `redirect` parameter that can … |
Vulnerable |
|
GHSA-68g8-c275-xf2m
Aliases: CVE-2024-46990 |
Directus vulnerable to SSRF Loopback IP filter bypass ### Impact If you're relying on blocking access to localhost using the … | There are no reported fixed by versions. |
|
GHSA-cff8-x7jv-4fm8
Aliases: CVE-2024-45596 |
Session is cached for OpenID and OAuth2 if `redirect` is not used ### Summary Unauthenticated user can access credentials of … | There are no reported fixed by versions. |
|
GHSA-j3rg-3rgm-537h
Aliases: CVE-2023-26492 |
Directus vulnerable to Server-Side Request Forgery On File Import ### Summary Directus versions <=9.22.4 is vulnerable to Server-Side Request Forgery … | There are no reported fixed by versions. |
|
GHSA-m5q3-8wgf-x8xf
Aliases: CVE-2023-27481 |
Directus vulnerable to extraction of password hashes through export querying ### Impact Users with read access to the `password` field … |
Vulnerable |
|
GHSA-8vg2-wf3q-mwv7
Aliases: CVE-2023-28443 |
directus vulnerable to Insertion of Sensitive Information into Log File ### Summary CWE-532: Insertion of Sensitive Information into Log File … |
Vulnerable |
|
GHSA-4hmq-ggrm-qfc6
Aliases: CVE-2023-27474 |
directus vulnerable to HTML Injection in Password Reset email to custom Reset URL ### Impact Instances relying on an allow-listed … | There are no reported fixed by versions. |
|
GHSA-22rr-f3p8-5gf8
Aliases: GMS-2023-2358 |
Directus affected by VM2 sandbox escape vulnerability ### Impact In vm2 for versions up to 3.9.19, Promise handler sanitization can … |
Vulnerable |
|
GHSA-qqmv-5p3g-px89
Aliases: CVE-2026-35412 |
Directus: TUS Upload Authorization Bypass Allows Arbitrary File Overwrite ## Summary Directus' TUS resumable upload endpoint (`/files/tus`) allows any authenticated … |
Vulnerable |
|
GHSA-393c-p46r-7c95
Aliases: CVE-2026-39942 |
Directus: Path Traversal and Broken Access Control in File Management API ## Summary A broken access control vulnerability was identified … |
Vulnerable |
|
GHSA-6q22-g298-grjh
|
Directus: Unauthenticated Denial of Service via GraphQL Alias Amplification of Expensive Health Check Resolver ## Summary The GraphQL specification permits … |
Vulnerable |
|
GHSA-mvv8-v4jj-g47j
Aliases: CVE-2026-39943 |
Directus: Sensitive fields exposed in revision history ### Summary Directus stores revision records (in `directus_revisions`) whenever items are created or … |
Vulnerable |
|
GHSA-q75c-4gmv-mg9x
Aliases: CVE-2026-35411 |
Directus: Open Redirect in Admin 2FA Setup Page ### Summary Directus is vulnerable to an Open Redirect via the redirect … |
Vulnerable |
|
GHSA-38hg-ww64-rrwc
Aliases: CVE-2026-35442 |
Directus: Authenticated Users Can Extract Concealed Fields via Aggregate Queries ### Summary Aggregate functions (`min`, `max`) applied to fields with … |
Vulnerable |
|
GHSA-cf45-hxwj-4cfj
Aliases: CVE-2026-35410 |
Directus: Open Redirect via Parser Bypass in OAuth2/SAML Authentication Flow ### Summary An open redirect vulnerability exists in the login … |
Vulnerable |
|
GHSA-ph52-67fq-75wj
Aliases: CVE-2026-35441 |
Directus: GraphQL Alias Amplification Denial of Service Due to Missing Query Cost/Complexity Limits ### Summary Directus' GraphQL endpoints (`/graphql` and … |
Vulnerable |
|
GHSA-wxwm-3fxv-mrvx
Aliases: CVE-2026-35413 |
Directus: GraphQL Schema SDL Disclosure Setting ## Summary When `GRAPHQL_INTROSPECTION=false` is configured, Directus correctly blocks standard GraphQL introspection queries (`__schema`, … |
Vulnerable |
|
GHSA-8m32-p958-jg99
Aliases: CVE-2026-35408 |
Directus: Missing Cross-Origin Opener Policy ## Summary Directus's Single Sign-On (SSO) login pages lacked a `Cross-Origin-Opener-Policy` (COOP) HTTP response header. … |
Vulnerable |
|
GHSA-wv3h-5fx7-966h
Aliases: CVE-2026-35409 |
Directus: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses in File Import ### Summary A Server-Side Request Forgery (SSRF) protection bypass … |
Vulnerable |
|
GHSA-jr94-gj3h-c8rf
Aliases: CVE-2026-26185 |
Directus Vulnerable to User Enumeration via Password Reset Timing Attack ### Summary A timing-based user enumeration vulnerability exists in the … |
Vulnerable |
|
GHSA-3573-4c68-g8cc
Aliases: CVE-2026-22032 |
Directus has open redirect in SAML ## Security Advisory: Open Redirect in Directus SAML Authentication ### Summary An open redirect … |
Vulnerable |
|
GHSA-c6w9-5g5j-jh2p
Aliases: CVE-2026-61836 |
Directus: Authorization-dependent response served from unsegmented cache key ## Summary When response caching is enabled (`CACHE_ENABLED=true`), the cache-key derivation in … |
Not vulnerable |
|
GHSA-j5h6-vqc3-phqh
Aliases: CVE-2026-61835 |
Directus: SSRF Protection Bypass via 0.0.0.0 in File Import ### Summary The SSRF protection on Directus's file-import-from-URL feature can be … |
Not vulnerable |
|
CVE-2023-26492
Aliases: GHSA-j3rg-3rgm-537h |
Directus is a real-time API and App dashboard for managing SQL database content. Directus is vulnerable to Server-Side Request Forgery … |
Vulnerable Vulnerable |
|
GHSA-9qrm-48qf-r2rw
Aliases: CVE-2024-6533 |
Directus has a DOM-Based cross-site scripting (XSS) via layout_options ### Impact Directus allows an authenticated attacker to save cross site … |
Vulnerable Vulnerable |