Skip to content
OpenAdvisories

Vendor

directus

61 known vulnerabilities.

Products

directus 61 @directus/api 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-55746 Public exploit

    Directus allows unauthenticated file upload and file modification due to lacking input sanitization

    Directus is a real-time API and App dashboard for managing SQL database content. From 10.8.0 to before 11.9.3, a vulnerability exists in the file update mechanism which allows an unauthenticated actor to modify existing files with arbitrary contents (without …

    directus directus directus @directus/api npm
  • Medium 5.3
    CVE-2025-53887 Public exploit

    Directus's exact version number is exposed by the OpenAPI Spec

    Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, the exact Directus version number is incorrectly being used as OpenAPI Spec version this means that it is being exposed by …

    directus directus directus npm