Skip to content
OpenAdvisories

Package · npm

@directus/api

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.5
    CVE-2025-30351

    Suspended Directus user can continue to use session token to access API

    Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 10.10.0 and prior to version 11.5.0, a suspended user can use the token generated in session auth mode to access the API despite their status. This happens be…

    directus directus directus @directus/api npm