directus Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by directus

JSON RSS CSV 🔔 Create Alert Trigger

26 March 2025

Sensitive Data Exposure in Directus API from Directus Vendor
CVE-2025-30353
DirectusDirectus8.6HIGH

10 September 2024

Unauthenticated User Access to Last Authenticated User Credentials via OpenID or OAuth2 Vulnerability
CVE-2024-45596
DirectusDirectus7.4HIGH

1 March 2024

Password reset vulnerability in Directus backend allows attackers to receive password reset email of a victim user
CVE-2024-27295
DirectusDirectus8.2HIGH

6 March 2023

HTML Injection in Password Reset email to custom Reset URL in directus
CVE-2023-27474
DirectusDirectus8HIGH

4 April 2022

Cross-site Scripting in Directus
CVE-2022-24814
DirectusDirectus8.8HIGH

No more vulnerabilities to load.