Vulnerability index

Browse CVEs

42 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Directus HIGH 8.6
CVE-2026-61836

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 12.0.0, when response caching is enabled, the cache-key der…

Fix: 12.0.0+
Fix from $1,950 2026-07-15
Directus HIGH 7.7
CVE-2026-61835

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 12.0.0, the SSRF protection on Directus's file-import-from-…

Fix: 12.0.0+
Fix from $1,950 2026-07-15
Directus HIGH 8.8
CVE-2026-39942

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, the PATCH /files/{id} endpoint accepts a user-cont…

Fix: 11.17.0+
Fix from $1,950 2026-04-09
Directus MEDIUM 6.5
CVE-2026-39943

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, Directus stores revision records (in directus_revi…

Fix: 11.17.0+
Fix from $1,600 2026-04-09
Directus HIGH 8.1
CVE-2026-35412

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, Directus' TUS resumable upload endpoint (/files/tu…

Fix: 11.16.1+
Fix from $1,950 2026-04-06
Directus HIGH 8.1
CVE-2026-35442

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, aggregate functions (min, max) applied to fields w…

Fix: 11.17.0+
Fix from $1,950 2026-04-06
Directus MEDIUM 6.5
CVE-2026-35441

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, Directus' GraphQL endpoints (/graphql and /graphql…

Fix: 11.17.0+
Fix from $1,600 2026-04-06
Directus MEDIUM 6.1
CVE-2026-35410

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, an open redirect vulnerability exists in the login…

Fix: 11.16.1+
Fix from $1,600 2026-04-06
Directus MEDIUM 5.3
CVE-2026-35413

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, when GRAPHQL_INTROSPECTION=false is configured, Di…

Fix: 11.16.1+
Fix from $1,600 2026-04-06
Directus CRITICAL 9.3
CVE-2026-35408

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, Directus's Single Sign-On (SSO) login pages lacked…

Fix: 11.17.0+
Fix from $2,300 2026-04-06
Directus HIGH 7.7
CVE-2026-35409

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.0, a Server-Side Request Forgery (SSRF) protection by…

Fix: 11.16.0+
Fix from $1,950 2026-04-06
Directus MEDIUM 5.3
CVE-2026-26185

Directus is a real-time API and App dashboard for managing SQL database content. Before 11.14.1, a timing-based user enumeration vulnerability exists…

Fix: 11.15.0+
Fix from $1,600 2026-02-12
Directus MEDIUM 6.1
CVE-2026-22032

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.14.0, an open redirect vulnerability exists in t…

Fix: 11.14.0+
Fix from $1,600 2026-01-08
Directus MEDIUM 6.5
CVE-2025-64748

Directus is a real-time API and App dashboard for managing SQL database content. A vulnerability in versions prior to 11.13.0 allows authenticated us…

Fix: 11.13.0+
Fix from $1,600 2025-11-13
Directus MEDIUM 5.5
CVE-2025-64747

Directus is a real-time API and App dashboard for managing SQL database content. A stored cross-site scripting (XSS) vulnerability exists in versions…

Fix: 11.13.0+
Fix from $1,600 2025-11-13
Directus MEDIUM 5.4
CVE-2025-64746

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.13.0, Directus does not properly clean up field-…

Fix: 11.13.0+
Fix from $1,600 2025-11-13
Directus HIGH 7.5
CVE-2025-55746

Directus is a real-time API and App dashboard for managing SQL database content. From 10.8.0 to before 11.9.3, a vulnerability exists in the file upd…

Fix: 11.9.3+
Fix from $1,950 2025-08-20
Directus MEDIUM 6.5
CVE-2025-53889

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.12.0 and prior to version 11.9.0, Directus Flo…

Fix: 11.9.0+
Fix from $1,600 2025-07-15
Directus MEDIUM 5.3
CVE-2025-53887

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, the exact Dir…

Fix: 11.9.0+
Fix from $1,600 2025-07-15
Directus HIGH 7.5
CVE-2025-30353

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.12.0 and prior to version 11.5.0, when a Flow …

Fix: 11.5.0+
Fix from $1,950 2025-03-26
Directus MEDIUM 5.3
CVE-2025-30352

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0-alpha.4 and prior to version 11.5.0, the `…

Fix: 11.5.0+
Fix from $1,600 2025-03-26
Directus MEDIUM 5.3
CVE-2025-30350

Directus is a real-time API and App dashboard for managing SQL database content. The `@directus/storage-driver-s3` package starting in version 9.22.0…

Fix: 11.5.0+
Fix from $1,600 2025-03-26
Directus MEDIUM 5.3
CVE-2025-30225

Directus is a real-time API and App dashboard for managing SQL database content. The `@directus/storage-driver-s3` package starting in version 9.22.0…

Fix: 11.5.0+
Fix from $1,600 2025-03-26
Directus HIGH 7.5
CVE-2024-54151

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 11.0.0 and prior to version 11.3.0, when setting…

Fix: 11.3.0+
Fix from $1,950 2024-12-09
Directus MEDIUM 5.0
CVE-2024-46990

Directus is a real-time API and App dashboard for managing SQL database content. When relying on blocking access to localhost using the default `0.0.…

Fix: 10.13.3 / 11.1.0+
Fix from $1,600 2024-09-18
Directus MEDIUM 6.5
CVE-2024-45596

Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access credentials of last authenticated…

Fix: 10.13.3 / 11.1.0+
Fix from $1,600 2024-09-10
Directus MEDIUM 5.4
CVE-2024-6533

Directus v10.13.0 allows an authenticated external attacker to execute arbitrary JavaScript on the client. This is possible because the application i…

No fix yet
Fix from $1,600 2024-08-15
Directus MEDIUM 5.3
CVE-2024-39896

Directus is a real-time API and App dashboard for managing SQL database content. When relying on SSO providers in combination with local authenticati…

Fix: 10.13.0+
Fix from $1,600 2024-07-08
Directus HIGH 7.7
CVE-2024-39701

Directus is a real-time API and App dashboard for managing SQL database content. Directus >=9.23.0, <=v10.5.3 improperly handles _in, _nin operators.…

Fix: 10.6.0+
Fix from $1,950 2024-07-08
Directus MEDIUM 6.5
CVE-2024-39895

Directus is a real-time API and App dashboard for managing SQL database content. A denial of service (DoS) attack by field duplication in GraphQL is …

Fix: 10.12.0+
Fix from $1,600 2024-07-08