npm/directus CVE-2026-22032: medium 4.3, EPSS 0.23%

Directus has open redirect in SAML

Action: Upgrade directus to 11.14.0 or later.

npm i directus@11.14.0

Affected

Fixed versions

Sources

• osv: GHSA-3573-4c68-g8cc
• https://github.com/directus/directus/security/advisories/GHSA-3573-4c68-g8cc
• https://nvd.nist.gov/vuln/detail/CVE-2026-22032
• https://github.com/directus/directus/commit/dad9576ea9362905cc4de8028d3877caff36dc23
• https://github.com/directus/directus

CVE-2026-22032 · published 2026-01-06T19:22:38Z · modified 2026-02-03T03:15:39.368842Z · JSON