{"api_version":"v1","generated_at":"2026-10-07T09:45:00+00:00","product":{"cve_count":57,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-directus-directus-89c4febc79df","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/directus","name":"Directus","next_cursor":"djE6NTA","observations":[{"affected":"< 12.1.0","affected_versions_present":true,"cve_id":"CVE-2026-10716","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-10716","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-05T17:45:11.813Z","patch_url":"","primary_source":"","published":"2026-08-05T16:50:49.304Z"},{"affected":"< 12.0.0","affected_versions_present":true,"cve_id":"CVE-2026-61836","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-61836","fixed":"12.0.0.","last_modified":"2026-07-15T16:32:52.619Z","patch_url":"https://github.com/directus/directus/pull/27707","primary_source":"","published":"2026-07-15T14:17:21.034Z"},{"affected":"< 12.0.0","affected_versions_present":true,"cve_id":"CVE-2026-61835","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-61835","fixed":"12.0.0.","last_modified":"2026-07-21T14:07:42.434Z","patch_url":"https://github.com/directus/directus/pull/27606","primary_source":"","published":"2026-07-15T14:16:11.524Z"},{"affected":"< 11.17.0","affected_versions_present":true,"cve_id":"CVE-2026-39943","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39943","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-10T14:06:06.440Z","patch_url":"","primary_source":"","published":"2026-04-09T16:12:09.963Z"},{"affected":"< 11.17.0","affected_versions_present":true,"cve_id":"CVE-2026-39942","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39942","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T19:37:24.389Z","patch_url":"https://github.com/directus/directus/security/advisories/GHSA-393c-p46r-7c95","primary_source":"","published":"2026-04-09T16:07:54.100Z"},{"affected":"< 11.17.0","affected_versions_present":true,"cve_id":"CVE-2026-35442","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35442","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T13:30:12.880Z","patch_url":"","primary_source":"","published":"2026-04-06T21:36:57.807Z"},{"affected":"< 11.17.0","affected_versions_present":true,"cve_id":"CVE-2026-35441","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35441","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T15:08:57.877Z","patch_url":"","primary_source":"","published":"2026-04-06T21:36:07.737Z"},{"affected":"< 11.16.1","affected_versions_present":true,"cve_id":"CVE-2026-35413","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35413","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-08T14:05:44.361Z","patch_url":"","primary_source":"","published":"2026-04-06T21:34:32.683Z"},{"affected":"< 11.16.1","affected_versions_present":true,"cve_id":"CVE-2026-35412","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35412","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T16:23:16.091Z","patch_url":"","primary_source":"","published":"2026-04-06T21:33:44.867Z"},{"affected":"< 11.16.1","affected_versions_present":true,"cve_id":"CVE-2026-35411","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35411","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T13:37:57.212Z","patch_url":"","primary_source":"","published":"2026-04-06T21:33:06.664Z"},{"affected":"< 11.16.1","affected_versions_present":true,"cve_id":"CVE-2026-35410","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35410","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T15:09:07.019Z","patch_url":"","primary_source":"","published":"2026-04-06T21:32:13.985Z"},{"affected":"< 11.16.0","affected_versions_present":true,"cve_id":"CVE-2026-35409","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35409","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-08T14:05:02.971Z","patch_url":"","primary_source":"","published":"2026-04-06T21:31:13.575Z"},{"affected":"< 11.17.0","affected_versions_present":true,"cve_id":"CVE-2026-35408","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35408","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T16:23:42.264Z","patch_url":"","primary_source":"","published":"2026-04-06T21:30:22.824Z"},{"affected":"< 11.14.1; < 32.2.0","affected_versions_present":true,"cve_id":"CVE-2026-26185","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-26185","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-13T15:59:06.336Z","patch_url":"https://github.com/directus/directus/commit/e69aa7a5248c6e3e822cb1ac354dee295df90b2a","primary_source":"","published":"2026-02-12T21:54:13.901Z"},{"affected":"< 11.14.0","affected_versions_present":true,"cve_id":"CVE-2026-22032","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22032","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-15T14:53:09.871Z","patch_url":"https://github.com/directus/directus/commit/dad9576ea9362905cc4de8028d3877caff36dc23","primary_source":"","published":"2026-01-08T14:32:06.619Z"},{"affected":"< 11.13.0","affected_versions_present":true,"cve_id":"CVE-2025-64749","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-64749","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-11-14T17:15:38.905Z","patch_url":"https://github.com/directus/directus/commit/f99c9b89071f9d136cc9b0d0c182f2d24542bc31","primary_source":"","published":"2025-11-13T21:34:54.603Z"},{"affected":"< 11.13.0","affected_versions_present":true,"cve_id":"CVE-2025-64748","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-64748","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-11-13T21:39:43.765Z","patch_url":"https://github.com/directus/directus/commit/7737d56e096f95edfbdf861a3c08999ad31ce204","primary_source":"","published":"2025-11-13T21:29:44.649Z"},{"affected":"< 11.13.0","affected_versions_present":true,"cve_id":"CVE-2025-64747","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-64747","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-11-13T21:33:55.297Z","patch_url":"https://github.com/directus/directus/commit/d23525317f0780f04aa1fe7a99171a358e43cb2e","primary_source":"","published":"2025-11-13T21:13:42.627Z"},{"affected":"< 11.13.0","affected_versions_present":true,"cve_id":"CVE-2025-64746","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-64746","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-11-13T21:19:01.907Z","patch_url":"https://github.com/directus/directus/commit/84d7636969083387164ce5d2fd15a65e11e2d0b8","primary_source":"","published":"2025-11-13T20:54:42.351Z"},{"affected":">= 10.8.0, < 11.9.3","affected_versions_present":true,"cve_id":"CVE-2025-55746","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-55746","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-08-20T18:20:03.663Z","patch_url":"https://github.com/directus/directus/commit/d84dcc36f75fc5c858d43746b8f9c426c38d696b","primary_source":"","published":"2025-08-20T17:58:06.762Z"},{"affected":">= 9.12.0, < 11.9.0","affected_versions_present":true,"cve_id":"CVE-2025-53889","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-53889","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-07-15T19:48:56.003Z","patch_url":"https://github.com/directus/directus/commit/22be460c76957708d67fdd52846a9ad1cbb083fb","primary_source":"","published":"2025-07-14T23:50:23.283Z"},{"affected":">= 9.0.0, < 11.9.0","affected_versions_present":true,"cve_id":"CVE-2025-53887","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-53887","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-07-15T19:49:03.448Z","patch_url":"https://github.com/directus/directus/pull/25353","primary_source":"","published":"2025-07-14T23:40:59.198Z"},{"affected":">= 9.0.0, < 11.9.0","affected_versions_present":true,"cve_id":"CVE-2025-53886","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-53886","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-07-15T13:41:18.865Z","patch_url":"https://github.com/directus/directus/pull/25354","primary_source":"","published":"2025-07-14T23:35:56.448Z"},{"affected":">= 9.0.0, < 11.9.0","affected_versions_present":true,"cve_id":"CVE-2025-53885","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-53885","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-07-15T13:43:35.843Z","patch_url":"https://github.com/directus/directus/pull/25355","primary_source":"","published":"2025-07-14T23:18:57.503Z"},{"affected":">= 9.12.0, < 11.5.0","affected_versions_present":true,"cve_id":"CVE-2025-30353","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-30353","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-26T17:44:22.290Z","patch_url":"","primary_source":"","published":"2025-03-26T17:26:51.803Z"},{"affected":">= 9.0.0-alpha.4, < 11.5.0","affected_versions_present":true,"cve_id":"CVE-2025-30352","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-30352","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-03-27T15:15:07.652Z","patch_url":"https://github.com/directus/directus/commit/ac5a9964d9926f20dc063a74cb417dc7bbad676d","primary_source":"","published":"2025-03-26T17:18:39.567Z"},{"affected":">= 10.10.0, < 11.5.0","affected_versions_present":true,"cve_id":"CVE-2025-30351","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-30351","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-09T18:05:31.255Z","patch_url":"https://github.com/directus/directus/commit/ef179931c55b50c110feca8404901d5633940771","primary_source":"","published":"2025-03-26T17:13:42.096Z"},{"affected":">= 9.22.0, < 11.5.0","affected_versions_present":true,"cve_id":"CVE-2025-30350","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-30350","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-26T18:04:30.065Z","patch_url":"","primary_source":"","published":"2025-03-26T16:49:48.880Z"},{"affected":">= 9.22.0, < 11.5.0","affected_versions_present":true,"cve_id":"CVE-2025-30225","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-30225","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-26T18:04:53.899Z","patch_url":"","primary_source":"","published":"2025-03-26T16:27:14.665Z"},{"affected":">= 11.0.0, < 11.1.2","affected_versions_present":true,"cve_id":"CVE-2025-27089","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-27089","fixed":"11.1.2","last_modified":"2025-02-19T17:19:06.240Z","patch_url":"https://github.com/directus/directus/security/advisories/GHSA-99vm-5v2h-h6r6","primary_source":"","published":"2025-02-19T16:42:48.233Z"},{"affected":"< 11.2.0","affected_versions_present":true,"cve_id":"CVE-2025-24353","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-24353","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-12T20:41:29.561Z","patch_url":"https://github.com/directus/directus/commit/e288a43a79613dada905da683f4919c6965ac804","primary_source":"","published":"2025-01-23T17:45:32.868Z"},{"affected":">= 11.0.0, < 11.3.0","affected_versions_present":true,"cve_id":"CVE-2024-54151","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-54151","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-12-10T17:09:06.417Z","patch_url":"https://github.com/directus/directus/commit/ce0397d16cf767b5293cd57f626c5349b5732a21","primary_source":"","published":"2024-12-09T20:57:28.365Z"},{"affected":">= 10.10.0, < 10.13.4; >= 11.0.0-rc.1, < 11.2.0","affected_versions_present":true,"cve_id":"CVE-2024-54128","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-54128","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-12-06T15:56:34.323Z","patch_url":"","primary_source":"","published":"2024-12-05T16:55:53.434Z"},{"affected":"< 10.13.2","affected_versions_present":true,"cve_id":"CVE-2024-47822","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47822","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-14T12:02:32.509Z","patch_url":"","primary_source":"","published":"2024-10-08T17:54:21.088Z"},{"affected":"< 10.13.3; >= 11.0.0, < 11.1.0","affected_versions_present":true,"cve_id":"CVE-2024-46990","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-46990","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-18T18:19:24.086Z","patch_url":"https://github.com/directus/directus/commit/4aace0bbe57232e38cd6a287ee475293e46dc91b","primary_source":"","published":"2024-09-18T16:55:24.255Z"},{"affected":"< 10.13.3; >= 11.0.0, < 11.1.0","affected_versions_present":true,"cve_id":"CVE-2024-45596","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-45596","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-10T19:20:32.884Z","patch_url":"https://github.com/directus/directus/commit/4aace0bbe57232e38cd6a287ee475293e46dc91b","primary_source":"","published":"2024-09-10T18:43:33.413Z"},{"affected":"10.13.0","affected_versions_present":true,"cve_id":"CVE-2024-6534","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-6534","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-05-19T18:13:11.475Z","patch_url":"","primary_source":"","published":"2024-08-15T03:10:46.778Z"},{"affected":"10.13.0","affected_versions_present":true,"cve_id":"CVE-2024-6533","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-6533","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-05-19T17:56:31.826Z","patch_url":"","primary_source":"","published":"2024-08-15T03:04:08.250Z"},{"affected":">= 9.11, < 10.13.0","affected_versions_present":true,"cve_id":"CVE-2024-39896","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-39896","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T04:33:11.337Z","patch_url":"https://github.com/directus/directus/commit/454cb534d6ffa547feb11f4d74b932ae7368dae2","primary_source":"","published":"2024-07-08T17:27:56.032Z"},{"affected":"< 10.12.0","affected_versions_present":true,"cve_id":"CVE-2024-39895","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-39895","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T04:33:11.240Z","patch_url":"https://github.com/directus/directus/commit/543b345695071c1de61a35004bd063fe59dba0c8","primary_source":"","published":"2024-07-08T16:47:44.673Z"},{"affected":">= 9.23.0, < 10.6.0","affected_versions_present":true,"cve_id":"CVE-2024-39701","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-39701","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T04:26:16.090Z","patch_url":"","primary_source":"","published":"2024-07-08T16:43:01.595Z"},{"affected":"< 10.9.3","affected_versions_present":true,"cve_id":"CVE-2024-39699","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-39699","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T04:26:15.949Z","patch_url":"https://github.com/directus/directus/commit/d577b44231c0923aca99cac5770fd853801caee1","primary_source":"","published":"2024-07-08T15:32:04.556Z"},{"affected":"< 10.11.2","affected_versions_present":true,"cve_id":"CVE-2024-36128","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-36128","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T03:30:13.147Z","patch_url":"https://github.com/directus/directus/commit/7d2a1392f43613094de700062aba168a9400dd3b","primary_source":"","published":"2024-06-03T14:59:45.507Z"},{"affected":">= 10.10.0, < 10.11.0","affected_versions_present":true,"cve_id":"CVE-2024-34709","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-34709","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T02:59:22.093Z","patch_url":"https://github.com/directus/directus/commit/a6172f8a6a0f31a6bf4305a090de172ebfb63bcf","primary_source":"","published":"2024-05-13T19:39:32.313Z"},{"affected":"< 10.11.0","affected_versions_present":true,"cve_id":"CVE-2024-34708","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-34708","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T02:59:21.863Z","patch_url":"https://github.com/directus/directus/commit/e70a90c267bea695afce6545174c2b77517d617b","primary_source":"","published":"2024-05-13T19:33:55.305Z"},{"affected":"< 10.10.0","affected_versions_present":true,"cve_id":"CVE-2024-28238","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-28238","fixed":"10.10.0.","last_modified":"2024-08-02T19:50:43.970Z","patch_url":"https://github.com/directus/directus/security/advisories/GHSA-2ccr-g2rv-h677","primary_source":"","published":"2024-03-12T20:24:28.321Z"},{"affected":"< 10.10.0","affected_versions_present":true,"cve_id":"CVE-2024-28239","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-28239","fixed":"10.10.0.","last_modified":"2024-08-22T20:47:34.038Z","patch_url":"https://github.com/directus/directus/commit/5477d7d61babd7ffc2f835d399bf79611b15b203","primary_source":"","published":"2024-03-12T20:23:37.857Z"},{"affected":"< 10.8.3","affected_versions_present":true,"cve_id":"CVE-2024-27296","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27296","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-08T18:38:46.653Z","patch_url":"https://github.com/directus/directus/commit/a5a1c26ac48795ed3212a4c51b9523588aff4fa0","primary_source":"","published":"2024-03-01T15:43:33.601Z"},{"affected":"< 10.8.3","affected_versions_present":true,"cve_id":"CVE-2024-27295","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27295","fixed":"10.8.3.","last_modified":"2024-08-28T16:24:04.094Z","patch_url":"https://github.com/directus/directus/security/advisories/GHSA-qw9g-7549-7wg5","primary_source":"","published":"2024-03-01T15:37:09.617Z"},{"affected":">=10.4, < 10.6.2","affected_versions_present":true,"cve_id":"CVE-2023-45820","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-45820","fixed":"10.6.2.","last_modified":"2024-09-12T17:51:27.185Z","patch_url":"https://github.com/directus/directus/commit/243eed781b42d6b4948ddb8c3792bcf5b44f55bb","primary_source":"","published":"2023-10-19T18:38:18.856Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"Directus"}}