Browse CVEs

HIGH 8.6 CVE-2026-61836 Directus is a real-time API and App dashboard for managing SQL database content. Prior to 12.0.0, when response caching is enabled, the cache-key der… Directus 12.0.0+ Fix from $1,9502026-07-15 HIGH 7.7 CVE-2026-61835 Directus is a real-time API and App dashboard for managing SQL database content. Prior to 12.0.0, the SSRF protection on Directus's file-import-from-… Directus 12.0.0+ Fix from $1,9502026-07-15 HIGH 8.8 CVE-2026-39942 Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, the PATCH /files/{id} endpoint accepts a user-cont… Directus 11.17.0+ Fix from $1,9502026-04-09 MEDIUM 6.5 CVE-2026-39943 Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, Directus stores revision records (in directus_revi… Directus 11.17.0+ Fix from $1,6002026-04-09 HIGH 8.1 CVE-2026-35412 Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, Directus' TUS resumable upload endpoint (/files/tu… Directus 11.16.1+ Fix from $1,9502026-04-06 HIGH 8.1 CVE-2026-35442 Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, aggregate functions (min, max) applied to fields w… Directus 11.17.0+ Fix from $1,9502026-04-06 MEDIUM 6.5 CVE-2026-35441 Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, Directus' GraphQL endpoints (/graphql and /graphql… Directus 11.17.0+ Fix from $1,6002026-04-06 MEDIUM 6.1 CVE-2026-35410 Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, an open redirect vulnerability exists in the login… Directus 11.16.1+ Fix from $1,6002026-04-06 MEDIUM 5.3 CVE-2026-35413 Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, when GRAPHQL_INTROSPECTION=false is configured, Di… Directus 11.16.1+ Fix from $1,6002026-04-06 CRITICAL 9.3 CVE-2026-35408 Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, Directus's Single Sign-On (SSO) login pages lacked… Directus 11.17.0+ Fix from $2,3002026-04-06 HIGH 7.7 CVE-2026-35409 Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.0, a Server-Side Request Forgery (SSRF) protection by… Directus 11.16.0+ Fix from $1,9502026-04-06 MEDIUM 5.3 CVE-2026-26185 Directus is a real-time API and App dashboard for managing SQL database content. Before 11.14.1, a timing-based user enumeration vulnerability exists… Directus 11.15.0+ Fix from $1,6002026-02-12 MEDIUM 6.1 CVE-2026-22032 Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.14.0, an open redirect vulnerability exists in t… Directus 11.14.0+ Fix from $1,6002026-01-08 MEDIUM 6.5 CVE-2025-64748 Directus is a real-time API and App dashboard for managing SQL database content. A vulnerability in versions prior to 11.13.0 allows authenticated us… Directus 11.13.0+ Fix from $1,6002025-11-13 MEDIUM 5.5 CVE-2025-64747 Directus is a real-time API and App dashboard for managing SQL database content. A stored cross-site scripting (XSS) vulnerability exists in versions… Directus 11.13.0+ Fix from $1,6002025-11-13 MEDIUM 5.4 CVE-2025-64746 Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.13.0, Directus does not properly clean up field-… Directus 11.13.0+ Fix from $1,6002025-11-13 HIGH 7.5 CVE-2025-55746 Directus is a real-time API and App dashboard for managing SQL database content. From 10.8.0 to before 11.9.3, a vulnerability exists in the file upd… Directus 11.9.3+ Fix from $1,9502025-08-20 MEDIUM 6.5 CVE-2025-53889 Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.12.0 and prior to version 11.9.0, Directus Flo… Directus 11.9.0+ Fix from $1,6002025-07-15 MEDIUM 5.3 CVE-2025-53887 Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, the exact Dir… Directus 11.9.0+ Fix from $1,6002025-07-15 HIGH 7.5 CVE-2025-30353 Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.12.0 and prior to version 11.5.0, when a Flow … Directus 11.5.0+ Fix from $1,9502025-03-26 MEDIUM 5.3 CVE-2025-30352 Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0-alpha.4 and prior to version 11.5.0, the `… Directus 11.5.0+ Fix from $1,6002025-03-26 MEDIUM 5.3 CVE-2025-30350 Directus is a real-time API and App dashboard for managing SQL database content. The `@directus/storage-driver-s3` package starting in version 9.22.0… Directus 11.5.0+ Fix from $1,6002025-03-26 MEDIUM 5.3 CVE-2025-30225 Directus is a real-time API and App dashboard for managing SQL database content. The `@directus/storage-driver-s3` package starting in version 9.22.0… Directus 11.5.0+ Fix from $1,6002025-03-26 HIGH 7.5 CVE-2024-54151 Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 11.0.0 and prior to version 11.3.0, when setting… Directus 11.3.0+ Fix from $1,9502024-12-09 MEDIUM 5.0 CVE-2024-46990 Directus is a real-time API and App dashboard for managing SQL database content. When relying on blocking access to localhost using the default `0.0.… Directus 10.13.3 / 11.1.0+ Fix from $1,6002024-09-18 MEDIUM 6.5 CVE-2024-45596 Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access credentials of last authenticated… Directus 10.13.3 / 11.1.0+ Fix from $1,6002024-09-10 MEDIUM 5.4 CVE-2024-6533 Directus v10.13.0 allows an authenticated external attacker to execute arbitrary JavaScript on the client. This is possible because the application i… Directus No fix yet Fix from $1,6002024-08-15 MEDIUM 5.3 CVE-2024-39896 Directus is a real-time API and App dashboard for managing SQL database content. When relying on SSO providers in combination with local authenticati… Directus 10.13.0+ Fix from $1,6002024-07-08 HIGH 7.7 CVE-2024-39701 Directus is a real-time API and App dashboard for managing SQL database content. Directus >=9.23.0, <=v10.5.3 improperly handles _in, _nin operators.… Directus 10.6.0+ Fix from $1,9502024-07-08 MEDIUM 6.5 CVE-2024-39895 Directus is a real-time API and App dashboard for managing SQL database content. A denial of service (DoS) attack by field duplication in GraphQL is … Directus 10.12.0+ Fix from $1,6002024-07-08