149 matches found
directus (>=11.13.0, <=11.13.3) potentially affected by CVE-2026-22032 via @directus/api (>=32.0.0, <=32.1.0)
@directus/api NPM version =32.0.0, =11.13.0, =11.13.3 Source cves: CVE-2026-22032 Source advisory: GHSA-3573-4C68-G8CC...
GHSA-CPH6-524F-3HGR Directus Vulnerable to Information Leakage in Existing Collections
Summary: An observable difference in error messaging was found in the Directus REST API. The /items/collection API returns different error messages for these two cases: 1. A user tries to access an existing collection which they are not authorized to access. 2. A user tries to access a non-existi...
Insertion of Sensitive Information Into Sent Data
Overview @directus/api is a real-time API and App dashboard for managing SQL database content Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data due to concealed fields being searchable if read permissions enabled. An attacker can infer the...
CVE-2025-64749
Directus is a real-time API and App dashboard for managing SQL database content. An observable difference in error messaging was found in the Directus REST API in versions of Directus prior to version 11.13.0. The /items/collection API returns different error messages for two cases: when a user...
@directus/api (31.0.0), directus (11.12.0) potentially affected by CVE-2025-64747 via @directus/app (14.0.0)
@directus/app NPM version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @directus/app and may be impacted: - @directus/api 31.0.0 - directus 11.12.0 Source cves: CVE-2025-64747 Source advisory: SNYK:JS-DIRECTUSAPP-13985180...
Access Control Bypass
Overview @directus/api is a real-time API and App dashboard for managing SQL database content Affected versions of this package are vulnerable to Access Control Bypass due to improper cleanup of field-level permissions when a field is deleted. An attacker can gain unauthorized access to data by...
directus (>=11.13.0, <=11.13.1) potentially affected by CVE-2025-64746 via @directus/api (>=32.0.0, <=32.0.1)
@directus/api NPM version =32.0.0, =11.13.0, =11.13.1 Source cves: CVE-2025-64746 Source advisory: SNYK:JS-DIRECTUSAPI-13985179...
@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @deconz-community/directus-extension-ddf-store (0.1.0) +13 more potentially affected by CVE-2025-64749 via @directus/api (>=9.25.0, <=31.0.0)
@directus/api NPM version =9.25.0, =1.6.3, =1.2.2, =0.1.0, =9.25.0, =1.0.0, =1.0.1, =1.0.0, =1.0.75 - nuxtus-server 1.0.0 Source cves: CVE-2025-64749 Source advisory: MEND:CVE-2025-64749...
@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @deconz-community/directus-extension-ddf-store (0.1.0) +13 more potentially affected by CVE-2025-64748 via @directus/api (>=9.25.0, <=31.0.0)
@directus/api NPM version =9.25.0, =1.6.3, =1.2.2, =0.1.0, =9.25.0, =1.0.0, =1.0.1, =1.0.0, =1.0.75 - nuxtus-server 1.0.0 Source cves: CVE-2025-64748 Source advisory: MEND:CVE-2025-64748...
EUVD-2019-5242
Malware in sbrugna...
EUVD-2019-5241
Malware in sbrugna...
EUVD-2024-1618
Malicious code in bioql PyPI...
EUVD-2023-2063
Malicious code in bioql PyPI...
EUVD-2025-4664
Malicious code in bioql PyPI...
EUVD-2023-1043
Malicious code in bioql PyPI...
EUVD-2024-1709
Malicious code in bioql PyPI...
EUVD-2023-1055
Malicious code in bioql PyPI...
EUVD-2025-21409
Malicious code in bioql PyPI...