Latest vulnerabilities for "monospace directus node.js" - SecAlerts

Where

Sort:

Recently updated

Recently published

-Infinity

0

Directus DirectusDirectus: Authorization-dependent response served from unsegmented cache key

Risk 49

Severity

8.6

First published (updated )

DirectusDirectus: SSRF Protection Bypass via 0.0.0.0 in File Import

Risk 44

Severity

7.7

First published (updated )

Directus DirectusDirectus exposes sensitive fields in revision history

Risk 38

Severity

6.5

First published (updated )

Directus DirectusDirectus has a Path Traversal and Broken Access Control in File Management API

Risk 79

Severity

8.8

First published (updated )

npm/directusDirectus: Authenticated Users Can Extract Concealed Fields via Aggregate Queries

Risk 60

Severity

8.1

First published (updated )

npm/directusDirectus Affected by GraphQL Alias Amplification Denial-of-Service Due to Missing Query Cost/Complexity Limits

Risk 38

Severity

6.5

First published (updated )

npm/directusDirectus has a TUS Upload Authorization Bypass Allows Arbitrary File Overwrite

Risk 60

Severity

8.1

First published (updated )

npm/directusDirectus has a SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses in File Import

Risk 44

Severity

7.7

First published (updated )

npm/directusDirectus GraphQL Schema SDL Disclosure Setting

Risk 27

Severity

5.3

First published (updated )

npm/directusDirectus has an Open Redirect via Parser Bypass in OAuth2/SAML Authentication Flow

Risk 38

Severity

6.1

First published (updated )

npm/directusDirectus is an Open Redirect in Admin 2FA Setup Page

Risk 22

Severity

4.3

First published (updated )

npm/directusDirectus is Missing Cross-Origin Opener Policy

Risk 66

Severity

9.3

First published (updated )

Directus DirectusDirectus Affected by User Enumeration via Password Reset Timing Attack

Risk 19

Severity

5.3

EPSS

0.01%

First published (updated )

npm/@directus/apiDirectus has open redirect in SAML

Risk 27

Severity

6.1

EPSS

0.08%

First published (updated )

Directus DirectusDirectus Vulnerable to Information Leakage in Existing Collections

Risk 22

Severity

4.3

First published (updated )

Directus DirectusDirectus's conceal fields are searchable if read permissions enabled

Risk 38

Severity

6.5

First published (updated )

Directus DirectusDirectus has Improper Permission Handling on Deleted Fields

Risk 34

Severity

5.4

First published (updated )

Directus DirectusDirectus allows unauthenticated file upload and file modification due to lacking input sanitization

Risk 61

Severity

9.3

First published (updated )

npm/directusDirectus's webhook trigger flows can leak sensitive data

Risk 34

Severity

8.6

EPSS

0.04%

First published (updated )

Monospace Directus Node.jsDirectus `search` query parameter allows enumeration of non permitted fields

Risk 19

Severity

5.3

EPSS

0.03%

First published (updated )

npm/@directus/typesSuspended Directus user can continue to use session token to access API

Risk 16

Severity

4.3

EPSS

0.03%

First published (updated )

npm/directusDirectus's S3 assets become unavailable after a burst of HEAD requests

Risk 19

Severity

5.3

EPSS

0.05%

First published (updated )

npm/directusDirectus's S3 assets become unavailable after a burst of malformed transformations

Risk 19

Severity

5.3

EPSS

0.05%

First published (updated )

npm/@directus/api### Summary If there are two overlapping policies for the `update` action that allow access to diffe…

Risk 25

Severity

5.4

EPSS

0.02%

First published (updated )

npm/directusDirectus has Incorrect Permission Checking for GraphQL Subscriptions

Risk 39

Severity

6.5

First published (updated )

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203