{"action":"Upgrade directus to 11.14.0 or later.","affected":[{"fixed":"11.14.0","introduced":"0"}],"component":"directus","cve_ids":["CVE-2026-22032"],"ecosystem":"npm","epss":0.00231,"exploited":false,"fixed_versions":["11.14.0"],"ghsa_id":"GHSA-3573-4c68-g8cc","id":"tcs_01M5KEW0GFE4NYBJVHT5EB7AC8","modified_at":"2026-02-03T03:15:39.368842Z","published_at":"2026-01-06T19:22:38Z","references":["https://osv.dev/vulnerability/GHSA-3573-4c68-g8cc","https://github.com/directus/directus/security/advisories/GHSA-3573-4c68-g8cc","https://nvd.nist.gov/vuln/detail/CVE-2026-22032","https://github.com/directus/directus/commit/dad9576ea9362905cc4de8028d3877caff36dc23","https://github.com/directus/directus"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-3573-4c68-g8cc","url":"https://osv.dev/vulnerability/GHSA-3573-4c68-g8cc"}],"summary":"Directus has open redirect in SAML"}