npm/directus CVE-2024-39896: high 7.5, EPSS 0.51%
Directus Allows Single Sign-On User Enumeration
Action: Upgrade directus to 10.13.0 or later.
npm i directus@10.13.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.11 | 10.13.0 | - |
Fixed versions
| 10.13.0 |
Sources
- osv: GHSA-jgf4-vwc3-r46v
- https://github.com/directus/directus/security/advisories/GHSA-jgf4-vwc3-r46v
- https://nvd.nist.gov/vuln/detail/CVE-2024-39896
- https://github.com/directus/directus/commit/454cb534d6ffa547feb11f4d74b932ae7368dae2
- https://github.com/directus/directus
CVE-2024-39896 · published · modified · JSON