Skip to content
OpenAdvisories

Package · npm

@directus/app

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.0
    CVE-2025-24353

    Directus privilege escalation vulnerability using Share feature

    Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.2.0, when sharing an item, a typical user can specify an arbitrary role. It allows the user to use a higher-privileged role to see fields that otherwise the u…

    directus directus directus @directus/app npm
  • Medium 5.7
    CVE-2024-54128

    Directus has an HTML Injection in Comment

    Directus is a real-time API and App dashboard for managing SQL database content. The Comment feature has implemented a filter to prevent users from adding restricted characters, such as HTML tags. However, this filter operates on the client-side, which can be…

    directus directus directus @directus/app npm