directus vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-27474Highdirectus: directus vulnerable to HTML Injection in Password Reset email to custom Reset URL CVE-2023-26492Mediumdirectus: Directus vulnerable to Server-Side Request Forgery On File Import CVE-2022-36031Mediumdirectus: Directus vulnerable to unhandled exception on illegal filename_disk value CVE-2022-23080Mediumdirectus: Server-Side Request Forgery in Directus CVE-2022-26969Criticaldirectus: Insecure default value for CORS configuration CVE-2022-24814Highdirectus: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in directus

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo