Directus

Products

Exploited and recent CVEs

• CVE-2026-10716 High 7.5 Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostGIS collection creation 0.4%
• CVE-2026-61836 High 8.6 Directus: Authorization-dependent response served from unsegmented cache key 0.5%
• CVE-2026-61835 High 7.7 Directus: SSRF Protection Bypass via 0.0.0.0 in File Import 0.4%
• CVE-2026-39943 Medium 6.5 Directus exposes sensitive fields in revision history 0.2%
• CVE-2026-39942 High 8.5 Directus has a Path Traversal and Broken Access Control in File Management API 0.2%
• CVE-2026-35442 High 8.1 Directus: Authenticated Users Can Extract Concealed Fields via Aggregate Queries 0.3%
• CVE-2026-35441 Medium 6.5 Directus Affected by GraphQL Alias Amplification Denial-of-Service Due to Missing Query Cost/Complexity Limits 0.4%
• CVE-2026-35413 Medium 5.3 Directus GraphQL Schema SDL Disclosure Setting 0.3%
• CVE-2026-35412 High 7.1 Directus has a TUS Upload Authorization Bypass Allows Arbitrary File Overwrite 0.3%
• CVE-2026-35411 Medium 4.3 Directus is an Open Redirect in Admin 2FA Setup Page 0.3%
• CVE-2026-35410 Medium 6.1 Directus has an Open Redirect via Parser Bypass in OAuth2/SAML Authentication Flow 0.3%
• CVE-2026-35409 High 7.7 Directus has a SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses in File Import 0.3%
• CVE-2026-35408 High 8.7 Directus is Missing Cross-Origin Opener Policy 0.2%
• CVE-2026-26185 Medium 5.3 Directus Affected by User Enumeration via Password Reset Timing Attack 0.4%
• CVE-2026-26185 Medium 5.3 Directus Affected by User Enumeration via Password Reset Timing Attack 0.4%
• CVE-2026-22032 Medium 4.3 Directus has open redirect in SAML 0.2%
• CVE-2025-64749 Medium 4.3 Directus Vulnerable to Information Leakage in Existing Collections 0.3%
• CVE-2025-64748 Medium 6.5 Directus's conceal fields are searchable if read permissions enabled 0.3%
• CVE-2025-64747 Medium 5.5 Directus Vulnerable to Stored Cross-site Scripting 0.3%
• CVE-2025-64746 Medium 4.6 Directus has Improper Permission Handling on Deleted Fields 0.2%
• CVE-2025-55746 Critical 9.3 Directus allows unauthenticated file upload and file modification due to lacking input sanitization 1.4%
• CVE-2025-53889 Medium 6.5 Directus missing permission checks for manual trigger Flows 0.5%
• CVE-2025-53887 Medium 5.3 Directus's exact version number is exposed by the OpenAPI Spec 1.0%
• CVE-2025-53886 Medium 4.5 Directus doesn't redact tokens in Flow logs 0.5%
• CVE-2025-53885 Medium 4.2 Directus doesn't redact sensitive user data when logging via event hooks 0.2%
• CVE-2025-30353 High 8.6 Directus's webhook trigger flows can leak sensitive data 0.5%
• CVE-2025-30352 Medium 5.3 Directus `search` query parameter allows enumeration of non permitted fields 0.4%
• CVE-2025-30351 Low 3.5 Suspended Directus user can continue to use session token to access API 0.4%
• CVE-2025-30350 Medium 5.3 Directus's S3 assets become unavailable after a burst of HEAD requests 0.4%
• CVE-2025-30225 Medium 5.3 Directus's S3 assets become unavailable after a burst of malformed transformations 0.4%