Skip to content
Monospace Directus vulnerabilities
-
directus
Directus: Authorization-dependent response served from unsegmented cache key
CVE-2026-61836
Fix available
8.6 High
-
directus
Directus: SSRF Protection Bypass via 0.0.0.0 in File Import
CVE-2026-61835
Fix available
7.7 High
-
directus
Directus: Authenticated Users Can Extract Concealed Fields via Aggregate Queries
CVE-2026-35442
Fix available
8.1 High
-
directus
Directus Affected by GraphQL Alias Amplification Denial-of-Service Due to Missing Query Cost/Complexity Limits
CVE-2026-35441
Fix available
6.5 Medium
-
directus
Directus exposes sensitive fields in revision history
CVE-2026-39943
Fix available
6.5 Medium
-
directus
Directus has a TUS Upload Authorization Bypass Allows Arbitrary File Overwrite
CVE-2026-35412
Fix available
7.1 High
-
directus
Directus has a SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses in File Import
CVE-2026-35409
Fix available
7.7 High
-
directus
Directus GraphQL Schema SDL Disclosure Setting
CVE-2026-35413
Fix available
5.3 Medium
-
directus
Directus has an Open Redirect via Parser Bypass in OAuth2/SAML Authentication Flow
CVE-2026-35410
Fix available
6.1 Medium
-
directus
Directus is an Open Redirect in Admin 2FA Setup Page
CVE-2026-35411
Fix available
4.3 Medium
-
directus
Directus has a Path Traversal and Broken Access Control in File Management API
CVE-2026-39942
Fix available
8.5 High
-
directus
Directus is Missing Cross-Origin Opener Policy
CVE-2026-35408
Fix available
8.7 High
-
directus, directus @directus/api +1 more
Directus Affected by User Enumeration via Password Reset Timing Attack
CVE-2026-26185
Fix available
5.3 Medium
-
directus
Directus has open redirect in SAML
CVE-2026-22032
Fix available
4.3 Medium
-
directus
Directus Vulnerable to Information Leakage in Existing Collections
CVE-2025-64749
Fix available
4.3 Medium
-
directus
Directus Vulnerable to Stored Cross-site Scripting
CVE-2025-64747
Fix available
5.5 Medium
-
directus
Directus has Improper Permission Handling on Deleted Fields
CVE-2025-64746
Fix available
4.6 Medium
-
directus
Directus's conceal fields are searchable if read permissions enabled
CVE-2025-64748
Fix available
6.5 Medium
-
directus
Directus allows unauthenticated file upload and file modification due to lacking input sanitization
CVE-2025-55746
Public exploitFix available
9.3 Critical
-
directus
Directus missing permission checks for manual trigger Flows
CVE-2025-53889
Fix available
6.5 Medium
-
directus
Directus's exact version number is exposed by the OpenAPI Spec
CVE-2025-53887
Public exploitFix available
5.3 Medium
-
directus
Directus doesn't redact tokens in Flow logs
CVE-2025-53886
Fix available
4.5 Medium
-
directus
Directus doesn't redact sensitive user data when logging via event hooks
CVE-2025-53885
Fix available
4.2 Medium
-
directus
Directus's webhook trigger flows can leak sensitive data
CVE-2025-30353
Fix available
8.6 High
-
directus
Directus `search` query parameter allows enumeration of non permitted fields
CVE-2025-30352
Fix available
5.3 Medium
-
directus
Suspended Directus user can continue to use session token to access API
CVE-2025-30351
Fix available
3.5 Low
-
directus
Directus's S3 assets become unavailable after a burst of HEAD requests
CVE-2025-30350
Fix available
5.3 Medium
-
directus
Directus's S3 assets become unavailable after a burst of malformed transformations
CVE-2025-30225
Fix available
5.3 Medium
-
directus
Overlapping policies allow update to non-allowed fields in directus
CVE-2025-27089
Fix available
5.4 Medium
-
directus
Directus privilege escalation vulnerability using Share feature
CVE-2025-24353
Fix available
5.0 Medium
-
directus
Directus allows unauthenticated access to WebSocket events and operations
CVE-2024-54151
Fix available
7.5 High
-
directus
Directus has an HTML Injection in Comment
CVE-2024-54128
Fix available
5.7 Medium
-
directus
Directus inserts access token from query string into logs
CVE-2024-47822
Fix available
4.2 Medium
-
directus
SSRF Loopback IP filter bypass in directus
CVE-2024-46990
Fix available
5.0 Medium
-
directus
Directus's session is cached for OpenID and OAuth2 if `redirect` is not used
CVE-2024-45596
Fix available
7.4 High
-
directus
Directus 10.13.0 - Insecure object reference via PATH presets
CVE-2024-6534
Fix available
4.3 Medium
-
directus
Directus 10.13.0 - DOM-Based cross-site scripting (XSS) via layout_options
CVE-2024-6533
Fix available
5.4 Medium
-
directus
Directus allows SSO User Enumeration
CVE-2024-39896
Fix available
7.5 High
-
directus
Directus GraphQL Field Duplication Denial of Service (DoS)
CVE-2024-39895
Fix available
6.5 Medium
-
directus
Directus Incorrectly handles _in` filter
CVE-2024-39701
Fix available
6.3 Medium
-
directus
Directus has a Blind SSRF On File Import
CVE-2024-39699
Fix available
5.0 Medium
-
directus
Directus is soft-locked by providing a string value to random string util
CVE-2024-36128
Fix available
7.5 High
-
directus
Directus Lacks Session Tokens Invalidation
CVE-2024-34709
Fix available
5.4 Medium
-
directus
Directus allows redacted data extraction on the API through "alias"
CVE-2024-34708
Fix available
4.9 Medium
-
directus
Session Token in URL in directus
CVE-2024-28238
Fix available
2.3 Low
-
directus
URL Redirection to Untrusted Site in OAuth2/OpenID in directus
CVE-2024-28239
Fix available
5.4 Medium
-
directus
Directus version number disclosure
CVE-2024-27296
Fix available
5.3 Medium
-
directus
Directus MySQL accent insensitive email matching
CVE-2024-27295
Fix available
8.2 High
-
directus
Directus crashes on invalid WebSocket message
CVE-2023-45820
Fix available
5.9 Medium
-
directus
Directus has Incorrect Permission Checking for GraphQL Subscriptions
CVE-2023-38503
Fix available
5.7 Medium
- Show olderLoading…