Monospace Directus vulnerabilities
56 published vulnerabilities in Monospace Directus. The most were published in 2024 (18), and 14 so far in 2026.
Monospace Directus vulnerabilities by year
2020
2022
2023
2024
2025
2026
Most exploited Monospace Directus vulnerabilities
- CVE-2022-26969 Insecure default value for CORS configuration
- CVE-2025-55746 Directus allows unauthenticated file upload and file modification due to lacking input sanitization
- CVE-2026-35408 Directus is Missing Cross-Origin Opener Policy
- CVE-2026-61836 Directus: Authorization-dependent response served from unsegmented cache key
- CVE-2025-30353 Directus's webhook trigger flows can leak sensitive data
- CVE-2026-39942 Directus has a Path Traversal and Broken Access Control in File Management API
- CVE-2024-27295 Directus MySQL accent insensitive email matching
- CVE-2026-35442 Directus: Authenticated Users Can Extract Concealed Fields via Aggregate Queries
- CVE-2026-61835 Directus: SSRF Protection Bypass via 0.0.0.0 in File Import
- CVE-2026-35409 Directus has a SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses in File Import
- CVE-2024-54151 Directus allows unauthenticated access to WebSocket events and operations
- CVE-2024-39896 Directus allows SSO User Enumeration
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.