Directus is a real-time API and App dashboard for managing SQL database content
96%
Total Score
100
94
91
100
100
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-410222 directus is vulnerable to SQL Injection in versions 0.0.1 - 12.0.2. | 0.0.1 - 12.0.2 | High |
AIKIDO-2026-313039 directus is vulnerable to Path Traversal in versions 10.13.0 - 12.0.2. | 10.13.0 - 12.0.2 | High |
AIKIDO-2026-843606 directus is vulnerable to Missing Authorization in versions 11.13.0 - 12.0.2. | 11.13.0 - 12.0.2 | Medium |
AIKIDO-2026-545434 directus is vulnerable to Uncontrolled Resource Consumption in versions 0.0.1 - 12.0.2. | 0.0.1 - 12.0.2 | High |
AIKIDO-2026-593378 directus is vulnerable to Cross-Site WebSocket Hijacking (CSWSH) in versions 10.10.5 - 12.0.2. | 10.10.5 - 12.0.2 | High |
| Dependency | Last Release | Score |
|---|---|---|
@directus/api Version 39.1.0 | — | — |
@directus/update-check Version 14.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant