directus (>=11.0.0, <=11.1.1) potentially affected by CVE-2025-27089 via @directus/api (>=22.0.0, <=23.0.0)

@directus/api NPM version =22.0.0, =11.0.0, =11.1.1 Source cves: CVE-2025-27089 Source advisory: GHSA-99VM-5V2H-H6R6...

directus (>=11.0.0, <=11.1.1) potentially affected by CVE-2025-27089 via @directus/api (>=22.0.0, <=23.0.0)

@directus/api NPM version =22.0.0, =11.0.0, =11.1.1 Source cves: CVE-2025-27089 Source advisory: OSV:GHSA-99VM-5V2H-H6R6...

@directus/api (>=22.0.0, <=23.0.0) potentially affected by CVE-2025-27089 via directus (>=11.0.0, <=11.1.1)

directus NPM version =11.0.0, =22.0.0, =23.0.0 Source cves: CVE-2025-27089 Source advisory: MEND:CVE-2025-27089...

directus (>=11.0.0, <=11.1.1) potentially affected by CVE-2025-27089 via @directus/api (>=22.0.0, <=23.0.0)

@directus/api NPM version =22.0.0, =11.0.0, =11.1.1 Source cves: CVE-2025-27089 Source advisory: MEND:CVE-2025-27089...

@directus/api (>=20.0.0-rc.0, <=23.2.2) potentially affected by CVE-2024-6533 +1 more via directus (>=11.0.0-rc.1, <=11.3.2)

directus NPM version =11.0.0-rc.1, =20.0.0-rc.0, =23.2.2 Source cves: CVE-2024-6533, CVE-2024-6534 Source advisory: GHSA-9QRM-48QF-R2RW...

@directus/api (>=20.0.0-rc.0, <=23.2.2) potentially affected by CVE-2024-6533 +1 more via directus (>=11.0.0-rc.1, <=11.3.2)

directus NPM version =11.0.0-rc.1, =20.0.0-rc.0, =23.2.2 Source cves: CVE-2024-6533, CVE-2024-6534 Source advisory: OSV:GHSA-9QRM-48QF-R2RW...

@directus/api (>=20.0.0-rc.0, <=23.1.0) potentially affected by CVE-2025-24353 via directus (>=11.0.0-rc.1, <=11.1.2)

directus NPM version =11.0.0-rc.1, =20.0.0-rc.0, =23.1.0 Source cves: CVE-2025-24353 Source advisory: OSV:GHSA-PMF4-V838-29HG...

@directus/api (>=20.0.0-rc.0, <=23.1.0) potentially affected by CVE-2025-24353 via directus (>=11.0.0-rc.1, <=11.1.2)

directus NPM version =11.0.0-rc.1, =20.0.0-rc.0, =23.1.0 Source cves: CVE-2025-24353 Source advisory: GHSA-PMF4-V838-29HG...

@directus/api (>=20.0.0-rc.0, <=23.1.0), directus (>=11.0.0-rc.1, <=11.1.2) potentially affected by CVE-2025-24353 via @directus/app (>=13.0.0-rc.0, <=13.3.0)

@directus/app NPM version =13.0.0-rc.0, =20.0.0-rc.0, =11.0.0-rc.1, =11.1.2 Source cves: CVE-2025-24353 Source advisory: OSV:GHSA-PMF4-V838-29HG...

CVE-2024-54151

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 11.0.0 and prior to version 11.3.0, when setting WEBSOCKETSGRAPHQLAUTH or WEBSOCKETSRESTAUTH to "public", an unauthenticated user is able to do any of the supported operations CRUD, subscriptions...

@directus/api (>=22.0.0, <=23.1.3) potentially affected by CVE-2024-54151 via directus (>=11.0.0, <=11.2.2)

directus NPM version =11.0.0, =22.0.0, =23.1.3 Source cves: CVE-2024-54151 Source advisory: MEND:CVE-2024-54151...

directus (>=11.1.0, <=11.2.2) potentially affected by CVE-2024-54151 via @directus/api (>=22.2.0, <=23.1.3)

@directus/api NPM version =22.2.0, =11.1.0, =11.2.2 Source cves: CVE-2024-54151 Source advisory: MEND:CVE-2024-54151...

@directus/api (>=22.0.0, <=23.1.3) potentially affected by CVE-2024-54151 via directus (>=11.0.0, <=11.2.2)

directus NPM version =11.0.0, =22.0.0, =23.1.3 Source cves: CVE-2024-54151 Source advisory: OSV:GHSA-849R-QRWJ-8RV4...

@directus/api (>=22.0.0, <=23.1.3) potentially affected by CVE-2024-54151 via directus (>=11.0.0, <=11.2.2)

directus NPM version =11.0.0, =22.0.0, =23.1.3 Source cves: CVE-2024-54151 Source advisory: GHSA-849R-QRWJ-8RV4...

directus (>=11.1.0, <=11.2.2) potentially affected by CVE-2024-54151 via @directus/api (>=22.2.0, <=23.1.3)

@directus/api NPM version =22.2.0, =11.1.0, =11.2.2 Source cves: CVE-2024-54151 Source advisory: OSV:GHSA-849R-QRWJ-8RV4...

directus (>=11.1.0, <=11.2.2) potentially affected by CVE-2024-54151 via @directus/api (>=22.2.0, <=23.1.3)

@directus/api NPM version =22.2.0, =11.1.0, =11.2.2 Source cves: CVE-2024-54151 Source advisory: GHSA-849R-QRWJ-8RV4...

@directus/api (>=18.0.0, <=21.0.1) potentially affected by CVE-2024-54128 via directus (>=10.10.0, <=10.13.2)

directus NPM version =10.10.0, =18.0.0, =21.0.1 Source cves: CVE-2024-54128 Source advisory: OSV:GHSA-R6WX-627V-GH2F...

@directus/api (>=18.0.0, <=21.0.1) potentially affected by CVE-2024-54128 via directus (>=10.10.0, <=10.13.2)

directus NPM version =10.10.0, =18.0.0, =21.0.1 Source cves: CVE-2024-54128 Source advisory: GHSA-R6WX-627V-GH2F...

@directus/api (>=20.0.0-rc.0, <=23.1.2) potentially affected by CVE-2024-54128 via directus (>=11.0.0-rc.1, <=11.2.1)

directus NPM version =11.0.0-rc.1, =20.0.0-rc.0, =23.1.2 Source cves: CVE-2024-54128 Source advisory: GHSA-R6WX-627V-GH2F...

@directus/api (>=20.0.0-rc.0, <=23.1.2) potentially affected by CVE-2024-54128 via directus (>=11.0.0-rc.1, <=11.2.1)

directus NPM version =11.0.0-rc.1, =20.0.0-rc.0, =23.1.2 Source cves: CVE-2024-54128 Source advisory: OSV:GHSA-R6WX-627V-GH2F...