Directus

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 36
    Known Exploited: 0
    1
    Critical Level Threats
    10
    High Level Threats
    23
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-10716

    Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostGIS collection creation

    Last Modified: Aug 05, 2026
    Published: Aug 05, 2026

    CVE-2026-61836

    Directus: Authorization-dependent response served from unsegmented cache key

    Last Modified: Jul 15, 2026
    Published: Jul 15, 2026

    CVE-2026-61835

    Directus: SSRF Protection Bypass via 0.0.0.0 in File Import

    Last Modified: Jul 21, 2026
    Published: Jul 15, 2026

    CVE-2026-39943

    Directus exposes sensitive fields in revision history

    Last Modified: Apr 15, 2026
    Published: Apr 09, 2026

    CVE-2026-39942

    Directus has a Path Traversal and Broken Access Control in File Management API

    Last Modified: Apr 15, 2026
    Published: Apr 09, 2026
    Items Per Page
    Directus Vulnerabilities & Security CVEs | CVE-DB