@directus/api (>=20.0.0-rc.0, <=23.1.2) potentially affected by CVE-2024-54128 via directus (>=11.0.0-rc.1, <=11.2.1)

directus NPM version =11.0.0-rc.1, =20.0.0-rc.0, =23.1.2 Source cves: CVE-2024-54128 Source advisory: MEND:CVE-2024-54128...

@directus/api (>=18.0.0, <=21.0.1) potentially affected by CVE-2024-54128 via directus (>=10.10.0, <=10.13.2)

directus NPM version =10.10.0, =18.0.0, =21.0.1 Source cves: CVE-2024-54128 Source advisory: MEND:CVE-2024-54128...

@deconz-community/directus-extension-ddf-store (0.1.0), @meta-factory/cms (0.1.1) +8 more potentially affected by CVE-2024-47822 via @directus/api (>=9.25.0, <=21.0.0-rc.0)

@directus/api NPM version =9.25.0, =0.1.0, =9.25.0, =1.0.0, =1.0.1, =1.0.0, =1.0.75 - nuxtus-server 1.0.0 Source cves: CVE-2024-47822 Source advisory: MEND:CVE-2024-47822...

CVE-2024-47822 Directus inserts access token from query string into logs

Directus is a real-time API and App dashboard for managing SQL database content. Access tokens from query strings are not redacted and are potentially exposed in system logs which may be persisted. The access token in req.query is not redacted when the LOGSTYLE is set to raw. If these logs are no...

@directus/api (>=15.0.0, <=21.0.1), directus-extension-baetorra-booking (>=1.2.0, <=2.0.0) potentially affected by CVE-2024-46990 via directus (>=10.8.3, <=10.13.2)

directus NPM version =10.8.3, =15.0.0, =1.2.0, =2.0.0 Source cves: CVE-2024-46990 Source advisory: OSV:GHSA-68G8-C275-XF2M...

directus (>=11.0.0, <=11.0.1) potentially affected by CVE-2024-46990 via @directus/api (>=22.0.0, <=22.1.0)

@directus/api NPM version =22.0.0, =11.0.0, =11.0.1 Source cves: CVE-2024-46990 Source advisory: OSV:GHSA-68G8-C275-XF2M...

@directus/api (>=22.0.0, <=22.1.1) potentially affected by CVE-2024-46990 via directus (>=11.0.0, <=11.0.2)

directus NPM version =11.0.0, =22.0.0, =22.1.1 Source cves: CVE-2024-46990 Source advisory: OSV:GHSA-68G8-C275-XF2M...

@directus/api (>=22.0.0, <=22.1.1) potentially affected by CVE-2024-46990 via directus (>=11.0.0, <=11.0.2)

directus NPM version =11.0.0, =22.0.0, =22.1.1 Source cves: CVE-2024-46990 Source advisory: GHSA-68G8-C275-XF2M...

directus (>=11.0.0, <=11.0.1) potentially affected by CVE-2024-46990 via @directus/api (>=22.0.0, <=22.1.0)

@directus/api NPM version =22.0.0, =11.0.0, =11.0.1 Source cves: CVE-2024-46990 Source advisory: GHSA-68G8-C275-XF2M...

@directus/api (>=15.0.0, <=21.0.1), directus-extension-baetorra-booking (>=1.2.0, <=2.0.0) potentially affected by CVE-2024-46990 via directus (>=10.8.3, <=10.13.2)

directus NPM version =10.8.3, =15.0.0, =1.2.0, =2.0.0 Source cves: CVE-2024-46990 Source advisory: GHSA-68G8-C275-XF2M...

directus (11.0.0-rc.3) potentially affected by CVE-2024-46990 via @directus/api (21.0.0-rc.0)

@directus/api NPM version 21.0.0-rc.0 is affected by a known vulnerability. The following packages have a transitive dependency on @directus/api and may be impacted: - directus 11.0.0-rc.3 Source cves: CVE-2024-46990 Source advisory: GHSA-68G8-C275-XF2M...

directus (11.0.0-rc.3) potentially affected by CVE-2024-46990 via @directus/api (21.0.0-rc.0)

@directus/api NPM version 21.0.0-rc.0 is affected by a known vulnerability. The following packages have a transitive dependency on @directus/api and may be impacted: - directus 11.0.0-rc.3 Source cves: CVE-2024-46990 Source advisory: OSV:GHSA-68G8-C275-XF2M...

directus (>=11.0.0, <=11.0.1) potentially affected by CVE-2024-46990 via @directus/api (>=22.0.0, <=22.1.0)

@directus/api NPM version =22.0.0, =11.0.0, =11.0.1 Source cves: CVE-2024-46990 Source advisory: MEND:CVE-2024-46990...

@directus/api (>=22.0.0, <=22.1.1) potentially affected by CVE-2024-46990 via directus (>=11.0.0, <=11.0.2)

directus NPM version =11.0.0, =22.0.0, =22.1.1 Source cves: CVE-2024-46990 Source advisory: MEND:CVE-2024-46990...

@deconz-community/directus-extension-ddf-store (0.1.0), @meta-factory/cms (0.1.1) +8 more potentially affected by CVE-2024-46990 via @directus/api (>=9.25.0, <=21.0.0-rc.0)

@directus/api NPM version =9.25.0, =0.1.0, =9.25.0, =1.0.0, =1.0.1, =1.0.0, =1.0.75 - nuxtus-server 1.0.0 Source cves: CVE-2024-46990 Source advisory: MEND:CVE-2024-46990...

directus (>=11.0.0, <=11.0.2) potentially affected by CVE-2024-45596 via @directus/api (>=22.0.0, <=22.1.1)

@directus/api NPM version =22.0.0, =11.0.0, =11.0.2 Source cves: CVE-2024-45596 Source advisory: GHSA-CFF8-X7JV-4FM8...

@directus/api (21.0.1), directus (>=10.13.2, <=11.0.0-rc.3) potentially affected by CVE-2024-45596 via @directus/api (>=21.0.0-rc.0, <=21.0.0)

@directus/api NPM version =21.0.0-rc.0, =10.13.2, =11.0.0-rc.3 Source cves: CVE-2024-45596 Source advisory: GHSA-CFF8-X7JV-4FM8...

@directus/api (21.0.1), directus (>=10.13.2, <=11.0.0-rc.3) potentially affected by CVE-2024-45596 via @directus/api (>=21.0.0-rc.0, <=21.0.0)

@directus/api NPM version =21.0.0-rc.0, =10.13.2, =11.0.0-rc.3 Source cves: CVE-2024-45596 Source advisory: OSV:GHSA-CFF8-X7JV-4FM8...

@directus/api (>=20.0.0-rc.0, <=22.1.1) potentially affected by CVE-2024-45596 via directus (>=11.0.0-rc.1, <=11.0.2)

directus NPM version =11.0.0-rc.1, =20.0.0-rc.0, =22.1.1 Source cves: CVE-2024-45596 Source advisory: OSV:GHSA-CFF8-X7JV-4FM8...

@directus/api (>=15.0.0, <=21.0.1), directus-extension-baetorra-booking (>=1.2.0, <=2.0.0) potentially affected by CVE-2024-45596 via directus (>=10.8.3, <=10.13.2)

directus NPM version =10.8.3, =15.0.0, =1.2.0, =2.0.0 Source cves: CVE-2024-45596 Source advisory: GHSA-CFF8-X7JV-4FM8...