@directus/app (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package @directus/app, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2024-54128 — CVSS 5.7 (medium): Directus is a real-time API and App dashboard for managing SQL database content. The Comment feature has implemented a filter to prevent…
• CVE-2025-24353 — CVSS 5.0 (medium): Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.2.0, when sharing an item, a typical…